This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About SCoupland
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About SCoupland
08-20-2019
45Posts
24Likes
4Solutions
Aug 20, 2019Last Visited
User
Activity
User
Profile
Latest posts by SCoupland
| Subject | Views | Posted |
|---|---|---|
| 1585 | 07-21-2017 01:57 AM | |
| 1598 | 07-20-2017 03:16 PM | |
| 1754 | 04-24-2013 09:00 AM | |
| 2805 | 04-16-2013 04:11 AM | |
| 1538 | 03-01-2013 01:35 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 02-07-2013 03:38 PM | |
| 1 Like | 02-20-2013 12:04 PM | |
| 1 Like | 04-24-2013 09:00 AM | |
| 1 Like | 02-07-2013 02:27 PM | |
| 2 Likes | 02-27-2013 02:52 PM |
User Badges
Community Statistics
| Member Since | 12-19-2012 02:34 AM |
| Date Last Visited | 08-20-2019 03:43 AM |
| Posts | 45 |
| Total Likes Received | 24 |
02-22-2013
02:20 AM
This may work: - test security-policy-match from <insert source zone> to zone-v8 source-user cn=net_vip,ou=paloalto,dc=domena destination 192.168.81.81 application web-browsing destination-port 80 Just replace the source zone and possibly the username (do a ? after entering source-user to get the correct syntax for their name). You can also add a "show all" at the end to see if it maybe is matching an earlier security policy.
... View more
02-21-2013
04:21 PM
1 Kudo
You don't need to assign a virtual router to the vsys. That simply makes it visible to the vsys. Virtual routers are configured at device level and interfaces are then assigned to the virtual router. The interfaces can then be assigned into different vsys' and will be able to pass traffic between each other once the appropriate external zones and security policy have been configured to allow traffic to flow.
... View more
02-21-2013
03:34 PM
1 Kudo
It would be a manual process unfortunately either by recreating the rules in the CLI/GUI or by editing the XML of an exported config and then re-importing the config. There's a simply article about it where one of the PAN TAC engineers did it which can be found here -
... View more
02-20-2013
02:11 PM
2 Kudos
The PA-2000 series implements SSL decryption in hardware and QoS and decompression are implemented in software. If you watch the below video you will see the layout of components for both the 3020 and 3050 about 3minutes in. The PA-3020 does not have a network processor so all of the routing, QoS and NAT is all done in software. The PA-3050 does have the network processor and implements it all in hardware. Video Link : 1238 I would reiterate that I would monitor my PA-2000 to see whether there is a problem with the memory usage and then raise a support case if it continues to increase as this could potentially be a bug. I only suggest discussing with your SE replacing the PA-2000 with a PA-3000 if you feel that it is not meeting your requirements after establishing whether this is normal behaviour of the PA-2000.
... View more
02-20-2013
01:01 PM
2 Kudos
You should only really need to restart the management and device servers if there respective memory values are high or you've been directed to by support. Those values look OK but keep an eye on them over time to see if it increases over time. Another thing you can check for is the presence of backtraces and core files by performing a "show system files" and if there is anything with a recent time stamp for any time you have issues you may want to have PAN support investigate. It could be an as yet undiscovered bug. If you feel that your 2050s aren't cutting it you may wish to approach your account managers SE about upgrading to 3020s as while they are more expensive I believe they were doing some deals for people wanting to upgrade.
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks