This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences

About Alex_Samad

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
Alex_Samad
‎03-17-2024
since ‎05-08-2017
L4 Transporter
User Activity
User Profile
Latest posts by Alex_Samad
View All
User Badges
Community Statistics
Member Since ‎05-08-2017 10:08 PM
Date Last Visited ‎03-17-2024 11:41 PM
Posts 339
Total Likes Received 24

Virtural router how many do have and when to have multiple

by in General Topics
‎09-11-2020 10:23 PM
‎09-11-2020 10:23 PM
Hi   So I am doing some network segregation.   I have  vr with say 40 interfaces on it. I want to add 3 more. can i create a new vr (vr_b) place the 3 interface on the new vr (vr_b) and then create a vlan to connect vr original (vr_a) to new vr (vr_b)   When do you create a new vr ? And what is the down side.       ... View more

Re: How do i setup a BGP inbound filter that allows only 1 AS

by in General Topics
‎09-11-2020 04:09 PM
‎09-11-2020 04:09 PM
Gave it a try seems to work ! ... View more

How do i setup a BGP inbound filter that allows only 1 AS

by in General Topics
‎09-11-2020 04:02 PM
‎09-11-2020 04:02 PM
Been looking and googling and can't find it .   so I have created a BGP import filter. attached to router group. But the match ...  "AS Path Regular Expression"   what do i put in there to limit it to 1 AS   Find it hard to believe somebody hasn't done this. Also the doco ... sigh   I'm thinking something like   ^[^_]*$ might work . not even sure is pa regex is standards compliant ... View more

Re: SSL Decryption: ERR_HTTP2_INADEQUATE_TRANSPORT_SECURITY

by in General Topics
‎09-09-2020 02:33 PM
1 Kudo
‎09-09-2020 02:33 PM
1 Kudo
Definitely seems like they have done a whole lot of ssl decrypt work in 10.x.   Pity they will not be back porting into 9.0.   Just have to wait till TAC recommends 10 ... View more

Re: PBF with nat

by in General Topics
‎07-17-2020 09:36 PM
‎07-17-2020 09:36 PM
Can't seem to edit    What I would like to really do is say if the source address is this (the SNAT address) then use this as the next hop ..     ... View more

PBF with nat

by in General Topics
‎07-17-2020 08:57 PM
‎07-17-2020 08:57 PM
Hi   So I have 1 internal address that when it goes out via the PA to the internet (SNAT) i want it us a specific route - net hop.   So it looks like I can't set pBF on source address (SNAT). has to be on the original address. and I can't specify outbound internet   ... View more

Re: traffic segmenation affect app-id

by in General Topics
‎07-16-2020 02:07 PM
‎07-16-2020 02:07 PM
well this is on a ssl hand shake the initial setup.   I go openssl s_client connect <ip>:443    that fails. I have been working with support for a while now. and they are saying cause their might be some segmenation happening that could affect the firewall interpreting the ssl handshake as some of the packets are not being processed !   I was rather suprised. ... View more

traffic segmenation affect app-id

by in General Topics
‎07-15-2020 06:54 PM
‎07-15-2020 06:54 PM
Hi   So I am working through a ssl decrypt issue with PA support. I am being told that because the stream is being segmented - so not coming as 1500mtu packets. the PA can't work out what the stream is.   The implication is that app-id doesn't work properly unless you have full 1500mtu packets.   I thnk my SE is agreeing - not 100% sure.   I am a bit lost on this, cause I wouldn't have though segmentaiton would cause a problem expect for if there was a timeout     ... View more

Re: ipsec question

by in General Topics
‎07-06-2020 02:46 AM
‎07-06-2020 02:46 AM
This covers it   https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGkCAK ... View more

Re: Seeing these errors in my log pan_packet_diag.log

by in General Topics
‎07-05-2020 09:28 PM
‎07-05-2020 09:28 PM
Told to just ignore it from tac. sigh.   the error seems to be happening multilple times a sec.   sigh ... View more

Re: Seeing these errors in my log pan_packet_diag.log

by in General Topics
‎07-04-2020 12:51 AM
‎07-04-2020 12:51 AM
Found those errors in that log file and you can see every sec they are writting lots of line yeah opened tac case. thought I would ask here ... View more

Re: ipsec question

by in General Topics
‎07-04-2020 12:36 AM
‎07-04-2020 12:36 AM
So because the destination address is part of the proxy, it will route it via the tunnel.   Thought that might be the case.   Thanks   edit did a quick check remove the static routes and tested the FIB for that destination it wasn't going via the tunnel !   Did a quick test the packets are not going out the tunnel - they are going out the public ae.   so my ae.7 is my internet and I have a few ip's on here. one of them is my end of the ipsec ike     ... View more

ipsec question

by in General Topics
‎07-03-2020 07:17 PM
‎07-03-2020 07:17 PM
Hi   So i have my public interface ae1.10 I attached a ikev2 interface to that and attach it to tunnel.50   no the other side of the ipsec tunnel are providing 192.168.10.0/24 and I am providing 192.168.250.0/24   do I have to place a static route in the v_router saying 192.168.10.0/24 via tunnel.50 how do i do that if I haven't applied a ip address to the tunnel interface, do I have to  do I have to add the static route ? ... View more

Seeing these errors in my log pan_packet_diag.log

by in General Topics
‎07-03-2020 07:13 PM
‎07-03-2020 07:13 PM
Hi   seems to be filling up my log file ?  I have no idea    2020-07-04 12:09:26.595 +1000 Error: pan_cfg_url_policy_need_hdr_insrt_log(pan_cfg_url_policy.c:274): url_profile (nil), cfg available: 1 2020-07-04 12:09:26.595 +1000 Error: pan_cfg_url_policy_need_hdr_insrt_log(pan_cfg_url_policy.c:274): url_profile (nil), cfg available: 1 2020-07-04 12:09:26.595 +1000 Error: pan_cfg_url_policy_need_hdr_insrt_log(pan_cfg_url_policy.c:274): url_profile (nil), cfg available: 1 2020-07-04 12:09:26.596 +1000 Error: pan_cfg_url_policy_need_hdr_insrt_log(pan_cfg_url_policy.c:274): url_profile (nil), cfg available: 1 2020-07-04 12:09:26.596 +1000 Error: pan_cfg_url_policy_need_hdr_insrt_log(pan_cfg_url_policy.c:274): url_profile (nil), cfg available: 1 2020-07-04 12:09:26.596 +1000 Error: pan_cfg_url_policy_need_hdr_insrt_log(pan_cfg_url_policy.c:274): url_profile (nil), cfg available: 1 2020-07-04 12:09:26.596 +1000 Error: pan_cfg_url_policy_need_hdr_insrt_log(pan_cfg_url_policy.c:274): url_profile (nil), cfg available: 1 2020-07-04 12:09:26.596 +1000 Error: pan_cfg_url_policy_need_hdr_insrt_log(pan_cfg_url_policy.c:274): url_profile (nil), cfg available: 1 2020-07-04 12:09:26.596 +1000 Error: pan_cfg_url_policy_need_hdr_insrt_log(pan_cfg_url_policy.c:274): url_profile (nil), cfg available: 1 2020-07-04 12:09:26.596 +1000 Error: pan_cfg_url_policy_need_hdr_insrt_log(pan_cfg_url_policy.c:274): url_profile (nil), cfg available: 1 2020-07-04 12:09:26.596 +1000 Error: pan_cfg_url_policy_need_hdr_insrt_log(pan_cfg_url_policy.c:274): url_profile (nil), cfg available: 1 2020-07-04 12:09:26.596 +1000 Error: pan_cfg_url_policy_need_hdr_insrt_log(pan_cfg_url_policy.c:274): url_profile (nil), cfg available: 1 2020-07-04 12:09:26.596 +1000 Error: pan_cfg_url_policy_need_hdr_insrt_log(pan_cfg_url_policy.c:274): url_profile (nil), cfg available: 1 2020-07-04 12:09:26.596 +1000 Error: pan_cfg_url_policy_need_hdr_insrt_log(pan_cfg_url_policy.c:274): url_profile (nil), cfg available: 1 ... View more

Re: ldaps being id as ssl

by in General Topics
‎06-07-2020 08:05 PM
‎06-07-2020 08:05 PM
Thats a pain. so I have a rule that has ldap and default ports. now I need a new rule called ldaps with app ssl and port 636 ...   it is what it is   @BPry  if I create my own application - with parent app-id being ssl could I then use that application would the pa use my application ?   A ... View more
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎03-17-2024 11:41 PM
Likes Given To
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks