About Miroslaw_Iwanowski

I have tried to request test/free license of XSOAR using web form -  ( https://start.paloaltonetworks.com/sign-up-for-community-edition.html ). Completely ignored. Then I asked for support - they pointed out to local rep. Local rep can do nothing, they claimed that it seems that PA do not issue that license for European countries.    We have been long time customer of Cortex and PA firewalls and I am disappointed by that lack of any information and support.    Do you know where I can ask to get that license? Our minemeld is no longer supported and we need some replacement. ... View more

Hello, We had an issue of some computers getting disconnected status in XDR. In Lansweeper the status of  XDR was disabled. After a long discussion with local support we came out with a nice procedure that allows to reconnect those client without reinstallation.   Assume we have a laptop lt00666 with a XDR client installed but disconnected from XDR console.   Open a command line to swclt00666 using Sysinternaltools tool psexec64 Psexec64.exe \\swclt00666 cmd   Move to XDR client dir cd c:\Program Files\Palo Alto Networks\Traps   Get XDR client info   c:\Program Files\Palo Alto Networks\Traps>cytool.exe enum Process ID      Agent Version 1072            7.2.1.2718   Go to your XDR console and display Agent Installations   Make sure you have package ID enabled in default view   Copy ID for XDR version of the disconnected station - it will be long alphanumeric string (it is good to have it prepared for most common version you use so you do not have to look up at the console)   Issue a command to reconnect device to our XDR server (this is one line) c:\Program Files\Palo Alto Networks\Traps>cytool reconnect force 1d7b234343434343444cc   There will be no prompt displayed and you have to enter (paste) uninstallation password. After you enter it and press enter the device will display:   Enter supervisor password:   c:\Program Files\Palo Alto Networks\Traps>   The laptop should already be visible in console. Upgrade to latest version and it is finished.   Procedure works very nice for us and I hope that it will save some time for the community also. ... View more

Hello, I have following scenario. I have a two IPSEC connections to Oracle Cloud. The destination IP range is the same on both networks. IPSEC A - dest IP range 10.1.6.0/24, security zone Oracle1 IPSEC B - dest IP range 10.1.6.0/24, security zone Oracle 2 LAN - 192.168.0.1/24   Static routing: 10.1.6.0/24 to IPSECA 10.1.7.0/24 to IPSECB   I have created a: DNAT - from LAN to Oracle2, static DNAT - 10.1.6.0/24 SNAT  - from Oracle2 to LAN, static SNAT - 10.1.7.0/24   Users will open for example 10.1.7.1 and it should be directed to IPSECB and NAT should change destination address to 10.1.6.1.   The problem I am facing is that PA does routing twice pre and post NAT. Post NAT routing directs pocket to IPSECA as the destination address is already NATed to 10.1.6.1.   Is there a way to make it working correctly? I cannot do any changes on Oracle side - I only control my PA. ... View more

Hello   Yesterday I was setting up a new PA-220. As always I cloned template and used load config partial command to clone device-group:   load config partial mode replace from-xpath /config/devices/entry[@name='localhost.localdomain']/device-group/entry[@name='SRC'] to-xpath /config/devices/entry[@name='localhost.localdomain']/device-group/entry[@name='DST']  from running-config.xml   When I tried to commit I got information that DG named SRC is duplicated. It seems command now ignore to-xpath DG name. That was confirmed when looking into config XML.    I ended up with extracting XML config, duplicating DG, changing name, importing and loading. I do not know why we have clone button in templates and not in device groups. ... View more