About reaper

For priority assistance I would recommend you reach out to your support organization   your description is lacking a lot of detail to efficiently assist you quickly: how is your default routing configured and how are your PBF rules set up?   I'm assuming you have server A published for inbound services on ISP-X and want to have it go out of ISP-Y for it's normal web traffic? You could use a PBF rule for ISP-X with symmetric return enabled so return traffic is sent back to the original interface instead of following your default route ... View more

try allowing inbound port 5007 (or a custom one if you've changed it in uidagent) ... View more

have you checked if you're looking at the right OID ? ... View more

There's a bug (PAN-194805) fixed in 10.2.4 (which you are running) for a similar issue. You may want to reach out to TAC to check this out and see if the fix may have broken something else ... View more

The micro credential page on beacon actually lists all the required and recommended courses to pass the exam:   https://beacon.paloaltonetworks.com/student/collection/781496-palo-alto-networks-micro-credential-for-remote-user-administrator-pmrua     ... View more

Howdy   QoS is applied on the 'egress' interface (out of firewall), so for uploads you need to have a profile on the WAN interface and downloads have another profile on the LAN interface (I.e. a single session touches 2 different QoS profiles on the c2s and s2c) The class is applied on the c2s flow and applies to both profiles   Hope this helps ... View more

The threat logs will only populate the URL field if there's a url based vulnerability/threat. iIn other words, DNS security profile hits because there was a DNS lookup to a malicious domain   For 'regular' threats, additional URL information may be available from the url filtering logs associated with any web based connections, which you can see in the Detailed Log View    ... View more

dont increase the size of the existing disk, add another one thats' minimum 2TB, SCSI thick provisioned lazy zeroed after having booted, run the command and then reboot again ... View more

I'd like to inject a word of caution here, in favor of doing both peers during the same maintenance window   If you upgrade a member to a +1 major release, the upgraded member will go into 'nonfunctional' state which means it will take on a passive role and only assume the active role if the not-upgraded member goes down or is suspended. if you intend to 'test' this OS for a while you'd need to manually suspend the not-upgraded peer    if you upgrade one member +2 major versions, it will go into a forced suspend mode that you cannot recover from unless the other member is down, and then you can manually activate (unsuspend) it. so for this to run for more than a few minutes, you'd have to shut down or disconnect your other member   reverting one upgrade down can be easily achieved by running `debug swm revert` + `request restart system` from CLI (because the previously installed OS is maintained on an inactive disk partition), going down further requires a software install   protip on the upgrades: unless you're working on an old hardware, you can download the base image, download the maintenance version, and then directly install and boot into the latest maintenance release for a major version (e.g. 10.0.x directly to 10.1.9). even for the 'inbetween' version i'd recommend going to the latest maintenance release immediately as you don't want to get snagged on a bug mid upgrade     ... View more

in such a case i'd set the switch to transmit that vlan ID natively (untagged) on the 2 ports used (you will need 2 physical interfaces for this) by the different vsys, that way both vsys are able to access that same network     hope this helps ... View more

if you extract the debug logs and look in PANGPS.log you may find out more details about what's going on exactly ... View more

free is memory that is not being used at all while buffer/cache is memory that was once used and is kept in a ready state in case a process asks for the memory again. Both are not actively used but the buffer/cache has some preloaded data for quick access, this buffer data can be freed if another process needs more memory for a task   the high memory indicator would be the diff between total and used ... View more