About vinesh

vinesh · ‎01-06-2015

Hello, We've installed Panorama 6.0 and we can access it on ssh but the GUI doesnt load when we connect to it.Once we click ok, the page cannot be displayed. Any idea what could be the issue? the server specs is as per requirement.

vinesh · ‎03-01-2013

Hi, The agent settings are set to default. Part of the log also shows below. So, should we be probing ips like that? Using only AD method and could it be a problem with an inability to read the security log? 02/21/13 11:37:47:675[Debug 838]: Unable to probe IP 10.74.45.81, list is full with 201 entries, currently probing 40 IPs 02/21/13 11:37:47:675[Debug 838]: Unable to probe IP 10.74.17.21, list is full with 201 entries, currently probing 40 IPs 02/21/13 11:37:47:675[Debug 838]: Unable to probe IP 10.74.58.111, list is full with 201 entries, currently probing 40 IPs 02/21/13 11:37:47:675[Debug 838]: Unable to probe IP 10.74.96.188, list is full with 201 entries, currently probing 40 IPs 02/21/13 11:37:47:675[Debug 838]: Unable to probe IP 10.74.96.224, list is full with 201 entries, currently probing 40 IPs 02/21/13 11:37:47:675[Debug 838]: Unable to probe IP 10.74.110.78, list is full with 201 entries, currently probing 40 IPs 02/21/13 11:37:47:675[Debug 838]: Unable to probe IP 10.74.51.184, list is full with 201 entries, currently probing 40 IPs

vinesh · ‎03-01-2013

Hello, I've got UI agent 4.1.6 configured on PanOS 4.1.9. We have around 3000 users and in agent we see only around 700 user-mapping count. in the logs we get the below error for a lot of IPs and i guess that's why we dont get all users. I've tried to disable WMI but still doesnt work. Have anyone experienced a similar iissue? 2/22/13 08:17:29:688[ Info 856]: IP 10.76.15.140 is already in the probing queue 02/22/13 08:17:29:688[ Info 856]: IP 10.76.45.123 is already in the probing queue 02/22/13 08:17:29:688[ Info 856]: IP 10.76.15.205 is already in the probing queue 02/22/13 08:17:29:688[ Info 856]: IP 10.76.15.196 is already in the probing queue

vinesh · ‎05-16-2011

Hi, I have some clients having issues installing the sslvpn client on windows 7 pcs. We are using version 1.2.0. When i try to install manually, i get the error installing service. I get the netconnect icon but the connection stays on connecting..... Please advise. Vinesh

vinesh · ‎01-25-2011

Hi, I have 2 PA4020 on 3.1.7 and when committing, i get the error device: Invalid address value 'NaN'", but the commit is successful. Please advise. Thanks

vinesh · ‎01-16-2011

Hi, Indeed, setting the custom category from Allow to Alert, fixed the problem. Is it a bug then? Any explanation? Thanks Vinesh

vinesh · ‎01-12-2011

Hi, The pre-defined categories are being applied, but the custom categories are not. It seems that the pre-defined categories are somehow overriding the custom ones we added. the custom categories contains URLs which are mis-categorised. So, that's why they are in a separate custom category with Allow action. But this has been affected just after upgrade to 3.1.6. We didn't change any URL settings though. Thanks

vinesh · ‎01-11-2011

Hi, I have a PA2020 system with Custom URL category defined and it was working fine on 3.1.4. When we upgraded to 3.1.6, the Custom URL category was not working and URL present in the custom category were being blocked, even if they were in the allow list. We have deleted and re-created the Custom Category, but same issue. Has anyone of you experienced this issue and any solution? Thanks Vinesh

vinesh · ‎07-13-2010

Hello, has anyone integrated PAN URL logs successfully with Sawmill for detailed reporting? Would need some help on that given that we need to get browse time per user. thanks

vinesh · ‎06-03-2010

Hello, I have a PA in front of a DNS server and since the date we installed the PA, the DNS zone Transfers to the remote site is not working. The remote DNS admin stated that there are timeouts and that the firewall should allow fragmented packets to pass through. Any idea on what could be the issue on PAN side? thanks Vinesh

vinesh · ‎05-24-2010

This has been experienced after upgrading to 3.1.2. I'll contact Support

vinesh · ‎05-24-2010

Hello, i'm having issues updating the URL ,but the threat and content are being updated without problem. I tried changing dns but see error i get when i force update May 23 22:54:10 Error: pan_util_lock_process(pan_util.c:1106): Write lock '/tmp/pan_bc_download_lock' failed May 23 22:54:10 Error: main(pan_bc_download.c:148): Failed to lock process! Maybe another instance is running. May 23 22:54:22 ip 64.87.3.54 message RT time 4.485 May 23 22:54:23 ip 94.236.25.159 message RT time 0.483 May 23 22:54:26 Best IP for service.brightcloud.com is 94.236.25.159 May 23 22:54:26 Newer update available... May 23 22:54:40 Best IP for database.brightcloud.com is 0.0.0.0 May 23 22:54:43 Failed to download 'full_bcdb_3.344.bin' May 23 22:54:43 Error: pan_bc_download(pan_bc_url.c:1198): Failed to perform download and update May 23 22:54:43 Error downloading latest URL database

vinesh · ‎05-18-2010

Hello, I have got content and antivirus failing each and every time on a 3.1.0 system. i forced the upgrade several times, but i keep getting the following error: 13:54:59 61 Install FIN FAIL 13:56:11 Warnings: Details:content update failed with the following messages: ""error: can't create transaction lock on /opt/pancfg/var/lib/rpm/__db.000 Failed to install package panup-all-antivirus-211-238.tgz please advise. Thanks

vinesh · ‎05-09-2010

Hello You are suggesting that i create a loopback with an IP same as the WebPublicIP and have the same VR and Untrust zone as the WebPublicIP assigned to it? In the NAT policies, i also have the option to specify a destination interface, should i select teh loopback or leave it to none? Do i need any other static routes on PA to route to the 172.16.0.0 networks? In this case, we are just replacing a PIX, so they have the inbound static route already. thanks

vinesh · ‎05-08-2010

Hello, I need to configure a NAT from a Cisco PIX with config below to PAN. I configured NAT on PAN but the NAT doesn't seem to work PIX Config: static (inside,outside) webpublicip 172.16.10.10 netmask 255.255.255.255 0 0 static (inside,dmz) 172.16.10.10 172.16.10.10 netmask 255.255.255.255 0 0 PAN config NAT rule: Source Zone-> Outside, Des Zone->Outside, Source- Any, Destination-> webpublicip and in the translated packet Destination-> 172.16.10.10 Security rule: Source Zone-> Outside, Des Zone->Inside, Source- Any, Destination-> webpublicip In monitor traffic log, i do a filter on webpublicip but it says no NAT applied and we can't access this web server from Internet. Note that the outside interface on PAN is on a private IP Would appreciate your help on this. thanks

Member Since	‎08-03-2009 04:25 AM
Date Last Visited	‎09-01-2019 02:44 AM
Posts	19
Total Likes Received	1

Online Status	Offline
Date Last Visited	‎09-01-2019 02:44 AM

About vinesh

VM Panorama GUI Not loading

Re: Issues getting ip-user mapping with probing error

Issues getting ip-user mapping with probing error

sslvpn installation not working on Windows 7

Invalid address value 'NaN' on 3.1.7

Re: Custom URL not working

Re: Custom URL not working

Custom URL not working

Sawmill with PAN URL logs

DNS Zone Tranfers not working through PA

Re: UIA / PAN Agent to Firewall Communication

VM Panorama GUI Not loading

Re: Issues getting ip-user mapping with probing error

Issues getting ip-user mapping with probing error

sslvpn installation not working on Windows 7

Invalid address value 'NaN' on 3.1.7

Re: Custom URL not working

Re: Custom URL not working

Custom URL not working

Sawmill with PAN URL logs

DNS Zone Tranfers not working through PA

Re: URL Update failing

URL Update failing

Content & Antivirus update failing

Re: Help needed on Inbound NAT

Help needed on Inbound NAT

Unlock your full community experience!

About vinesh