About DavePalo

Hi all, Is anybody else having problems installing Applications / Threats definitions 360-1705 please? One half of my HA pair of PA-2020s has installed this OK but the other has not.  The install and push completes OK but the active version remains at 359-1703. Both devices were running OS 4.1.6 but these have both been upgraded to 4.1.9 today.  I have tried to reapply 360-1705 but exactly the same thing happens. During one of my attempts to apply 360-1705 on Friday the management server crashed and restarted.  This only happened once though and I must have tried installing 5 or 6 times now. The device has been rebooted twice now.  Once as part of the upgrade process and once again afterwards. Does anybody have any ideas please? Many thanks, Dave ... View more

Hi all, I'm trying to block access to Google Drive with not much success. The Applipedia has an entry called "google-drive" but this application definition does not seem to be present on my system (PA-2020 4.1.6 327-1497) I do have an application called "google-drive-web" so I have blocked this.  I have seen a couple of denys for this application this but Google Drive continues to work (both the Google Drive app instaled on my PC and the Google Drive web interface) .  The problem I think is that immediately after the "google-drive-web" drops in the log, there are a number of "ssl" connections to a similar IP address.  I suspect that these are the connections that need to be blocked. Has anybody managed to block Google Drive please, and if so how did you do it? Many thanks, Dave ... View more

Hi all, I'm having a IP-user mapping problem with my PA-500 unit running software version 3.1.8. This unit is due to be upgraded shortly, but it would really be appreciated if anybody knew a way of resolving my issue without rebooting the unit please.  Downtime is difficult. User Identification Agent is installed on a Windows machine and is able to obtain and display username information.  Clicking on "Get All" in the agent returns a full list of users and IPs. The PA-500 has a pan-agent connection defined  pointing at the above server and until last week has worked perfectly.  This week the PA-500 does not seem to be able to resolve IPs to users. From the command line the "show user pan-agent statistics" command returns the following: ---------------- --------------- ----- ------- ------------------ ------ ------ -------- -------- -------- --------------- ----- Name             IP Address      Port  Vsys     State             Users  Grps   IPs      Activity Timer(s) Domain          Index ---------------- --------------- ----- ------- ------------------ ------ ------ -------- -------- -------- --------------- ----- xxxxxxx.xxxx     xx.xx.xx.xx     12345 vsys1   *connected, ok     696    336    355563   793      300      xxxxxxxxxxxxx   0 "show user ip-user-mapping" returns the following: IP              Ident. By User                             Idle Timeout (s) Max. Timeout (s) --------------- --------- -------------------------------- ---------------- ---------------- Total: 0 users If I do the above command on another of my PA units I get a list of the address mappings back. (I don't have any other 3.1x boxes to compare with though only 4.1x boxes) To me, it looks as though the agent is working OK and that the PA unit has made a connection to it.  Is there something on the PA unit I can reset?  I've tried clearing the user-cache but that has made no difference. Any help appreciated! Thanks, Dave ... View more

Hi all, Does anybody know of a way to display detailed session information from the command line please? In addition to the basic info provided by "show session all" I would like to extract the "Start Time" and "Bytes" values for certain devices.  I am able to filter sessions based on the "Bytes" value but that value is never displayed in the output. Any help would be appreciated! Many thanks, Dave ... View more