About Sanssj

In an event of failure of this stand alone deployed Panorama box (log collection and device management) from where will the firewall gets the the templates(Networ & device settings) information since I dont see this information in the local Firewall device config file. is it ideal to manage the devices settings (HA, Admin roles, Authenction profiles,server profiles etc) via Panorama in a stand alone deployment or is it ideal to have them configured locally on the device. In the same scenario as mentioned above how do we remove the override cog wheel on the local FW device if you decide to manage everthing from Panorama. one way i could think of is " force the template values" (only when there are like to like values on the Template and on the local device) is there any other way.  ... View more

I had created a custom URL category (for specific tiny url let say *.tinyurl.com/) & in the url filtering profile I had opted for option to continue for this custom url category to make user acknowledge the action & log the event. but the caveat here is I see the user being going to the palo alto continue page but sometimes he can seamlessly go to the website without the pan conitue page. Also i see sometime see a chrome/firefox page saying i had even enabled ssl decrytption to for the user so that user gets conitnue page even if its http/https.(is this step needed?) but having the same issue. ... View more

What is the level of toughness that we have in real exam than what we see in practice test on a scale of 1-5. Is there any good pcnse practice tests that match the level of real exam. The only source of my prep is just the pcnse study guide is there any book that is recommended. Thx. ... View more

    We are using  windows user-id agent for parsing the user and user group mapping info. often i see in the logs that the user is being not recognized and hitting the deny rule.  after couple of minutes it starts recognizing the user and allows the traffic i am skeptical what could be the reason for this disparity.  why would any user info and user group mapping info go stale.  on a different note given the limitation of 10000 user group limitation on PAN what would be best go to approach to overcome this shortage. Thanks      ... View more

Is there any specific counter  to tell if traffic is being dropped during high-dataplane utilization ~100%. The show counter interface <interface> specifies dropped packets & packets dropped due to flow state checks. but will there be any slighest chance that we are dropping traffic because the chip buffers are under severe load. ... View more

I see a lot of non- syn-tcp from from few specific zone. I am sure that there is no asymmetric routing. If that has to be the case how to determine exact causing factor. Thanks ... View more

Hi guys, How can we creat a prototype miner in the MInemeld hosted by autofocus, is there any tech document with regards to how to customize/config a prototype for Miner. Thanks  ... View more

Hi, I would like to know the way it operates in the backend how palo alto does the SSL decryption in Vwire mode . As in a L3 deployment the connection will terminate on the firewall and firewall acts like a MITM and does the SSL Proxying. How is the case in Vwire Deployment. Thanks ... View more

Can any one confirm that when we configured log collector group with two managed log collector (both active and passive Panorama's) and if see the logging status on the firewalls does it show only the Active Log collector or both Active and Passive log collector. thanks ... View more