About M.Anderson

Currentlly testing 6.2.8-h6 (-c431) and see how it goes.  I was running into issue where connecting to a firewall, apparently I was sending a lot of API calls.  So many, it caused the management to run at 99% and generate an OOM alert from the firewall.  I disconnected and CPU went down.  This happened one other time as well on another firewall.  I was mearly going queries on address objects.  From Grok -  This often stems from outdated client versions not playing well with Tahoe's updated networking stack or security enhancements (e.g., stricter permissions for VPN extensions). In some cases, it leads to repeated API retries or polling loops to the firewall's management interface (over HTTPS), which could explain the spike in HTTP processes and near-99% CPU on the firewall's management plane. ... View more

I don't see why not as long as you have a 3rd interface in Area 0.  The different Area types represent different LSA types so you will see both LSA types in your LSDB.  An interesting question for sure as I've never actually done it.  We do run a lot of NSSA areas within our DC. ... View more

This is exactly what I was looking for!  thank you sir! ... View more

I think I could achieve what I'm looking for if Expedition allowed you to filter on the vsys... ... View more

Thank you @lychiang  Responses in BOLD First of all, when you create a device in panorama , have you retrieved the running config from content tab - Yes I had done this when you create a project, you will need to assign the panorama to the device - This is what I was missing to get the devices in the Project.  I went to Project > Settings > Devices and added the FW device.   Again, what I'm trying to achieve is to compare ONLY the duplicate objects between a single FW and Panorama, not all duplicate objects.  I did see it work for services [see attached] but, addresses shows all DG's.     ... View more

Thank you for the reply lychiang but the firewall has already been pulled into Panorama and Panorama has already been imported into Expedition. This is where I’m stuck. ... View more

I did both.  Added a new user account with API read permissions, as well as removing the special character.  Thank you sir!   ... View more

I'm running into the same issue.  PWD = 9 characters, upper case, lower case, number, special character # Any recommendations? ... View more

What does your topology look like?  Are you running N/S traffic through one vsys and E/W traffic via another vsys using a service chain from ACI?  This is the design we were looking into but never moved forward w/the E/W vsys.  Our N/S firewall connects to ACI via OSPF NSSA. ... View more

That's exactly how we fixed it.  Pulled in Panorama into Expedition and used the template.  Since we manage everything from Panorama, I wasn't expecting a local config, so now we're off to fix that.  Thank you! ... View more

OK, so mystery solved.  There was another admin that changed the SSH account.  Thank You! ... View more