This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences

About hkp

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
hkp
‎08-18-2015
since ‎10-29-2012
Not applicable
User Activity
User Profile
Latest posts by hkp
View All
My Liked Posts
View All
User Badges
Community Statistics
Member Since ‎10-29-2012 11:58 AM
Date Last Visited ‎08-18-2015 09:06 AM
Posts 20
Total Likes Received 1

SNMP and ARP

by in General Topics
‎04-17-2014 06:42 AM
‎04-17-2014 06:42 AM
Is there a way to pull the ARP table from a firewall using SNMP? We have tools that utilize the ipNetToMediaPhysAddress (OID repository - {iso(1) identified-organization(3) dod(6) internet(1) mgmt(2) mib-2(1) ip(4) ipNetToMediaTable(22) ipNe…) on other network devices, but it doesn't seem to be present in the Palo Alto firewalls. Thanks. ... View more
Labels:

Re: Replay pcap

by in General Topics
‎01-07-2014 07:08 AM
‎01-07-2014 07:08 AM
Thanks for the response kprakash.  I just thought it would be cool if I was able to do this while I was setting up a replay. ... View more

Re: Replay pcap

by in General Topics
‎01-07-2014 07:07 AM
‎01-07-2014 07:07 AM
I don't have access to that. "Access to this place or content is restricted." ... View more

Replay pcap

by in General Topics
‎01-07-2014 05:34 AM
‎01-07-2014 05:34 AM
Is there any way that I could feed a pcap into the firewall? What I would like to do is take a pcap and run it through a monitor port to test out some rules and IDS settings.  Right now my plan is to use tcpreplay, but I was curious if there was any way to do this natively in the firewall. ... View more

Re: Maximum number of addresses...

by in General Topics
‎09-03-2013 12:37 PM
‎09-03-2013 12:37 PM
Thanks for the info. I also found that the API has it. XPATH = /config/devices/entry[@name='localhost.localdomain']/platform/limits ... View more

Maximum number of addresses...

by in General Topics
‎09-03-2013 11:47 AM
‎09-03-2013 11:47 AM
I just ran into an error trying to push a config to a 5020 where I exceeded the maximum number of addresses per group for the specific model. Where could I find these maximums? Thanks. ... View more

Re: Rest API and import

by in General Topics
‎08-29-2013 11:26 AM
‎08-29-2013 11:26 AM
I see what you did there... Trying to trick me into reading the documentation.  They will all be used.  I upgraded to 5.1, but didn't actually read the release notes.  Heading off to do that now. Thanks. ... View more

Re: Rest API and import

by in General Topics
‎08-29-2013 09:17 AM
‎08-29-2013 09:17 AM
Fair enough. I have over 50,000 objects and two device groups. I just increased panorama to 2 CPUs and 4 GB memory. ... View more

Re: Rest API and import

by in General Topics
‎08-28-2013 01:51 PM
‎08-28-2013 01:51 PM
This is what I finally did. Now that I have all my addresses in Panorama adding a single address at a time takes over a minute. Is that expected behavior? ... View more

Rest API and import

by in General Topics
‎08-27-2013 08:54 AM
‎08-27-2013 08:54 AM
I need to add a lot of addresses (around 10,000) to my firewalls.  I have them in a list and have created a script to add them one at a time.  The problem is that this takes a long time.  I then tried to add them all, but my URI was too long.  So now I can add about 50 at a time.  It still takes a while. I also know that with the import command I can import a full config. My question is this: Is there a way with the import command that I can add several addresses at once? Thanks. ... View more

Re: Is it possible to group countries?

by in General Topics
‎08-09-2013 07:51 AM
‎08-09-2013 07:51 AM
Thanks for the response. Do you know if a feature like this in being worked on? -Heath ... View more

Is it possible to group countries?

by in General Topics
‎08-08-2013 06:46 AM
‎08-08-2013 06:46 AM
I want to be able to use a set of countries for some specific rules.  Is there any way to create a group with countries? ... View more
Labels:

Re: Has anyone gotten around being locked out of Panorama?

by in General Topics
‎03-19-2013 01:26 PM
‎03-19-2013 01:26 PM
I did have multiple admins, none were able to log in.  Failed attempts and lockout time were/are not configured.  I agree with the precautions, and followed all but the scheduled export.  I am working on setting that up now since I could have started with a new appliance and pushed my configuration to it.  I also agree that is a better plan than what I resorted to. ... View more

Re: Has anyone gotten around being locked out of Panorama?

by in General Topics
‎03-19-2013 10:47 AM
‎03-19-2013 10:47 AM
quinton wrote: What XML files are you referring to and where are they located? On the pancfg volume (sda5) any xml file you can find with phash value in it.  I assume that I really only had to edit one, but it was just easier to find them all.  It is the same file you get when you export the config. ... View more

Re: Has anyone gotten around being locked out of Panorama?

by in General Topics
‎03-19-2013 10:39 AM
‎03-19-2013 10:39 AM
mschuricht wrote: Hmm, how were you able to alter the PHASH if you could not log into the Panorama? Live CD or mount the vmdk to another Linux VM you happen to have running. ... View more
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎08-18-2015 09:06 AM
Latest Tags
No tags yet
Likes From
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks