About pulukas

As I said, I can't comment on the specifics of the situation because I don't have the details and am not a PAN or partner employee so also don't know the procedures.   But I would start by assuming everyone is above board and asking the what/where/why of the account team as I mentioned.  In other words give people the benefit of the doubt as you gather more information to make a fully informed judgement.   ... View more

I can't comment on your specific situation without the details but I am guessing the communications you received falls under this section of the privacy policy.   Business Partners. We may share Your Information with our business partners and channel partners so that they can provide you with information on our products or services, or follow up on a sales lead. If you do not wish to receive promotional emails from our partners, you can unsubscribe directly in the footer of the partner’s email to you.   Assuming the people contacting you were from a PAN partner/reseller and using the information about your usage as an opportunity to upsell other PAN products and services.   Many businesses will use transactional and other information to generate sales leads in this way for either interal sales teams and partners.  And in this time of Big Data with machine learning you can expect this to increase.  Some companies have a method to opt out of such activities.  You could explore that with your account manager or sales engineer.   ... View more

Yes, PAN recommends keeping clusters Active/Passive unless there are certain circumstances that require an Active/Active design.   The point to point routed link may or may not be best depending on the nature of your routing and zone configuration but is frequently a good practice.   Your basic issue here is that VPC or AE/LAG connections on the Cisco side are connecting to what is essential a Redundant Ethernet connection on the PAN side.  So on the Cisco side you would be using the "backup" interface feature which is generally the IOS implementation of Redundant ethernet.   ... View more

Consider upgrading the currently platform to match the new one first, then you can do the import method.   It is much simpler and less error prone.   ... View more

Many ISP offer a Remote Trigger Black Hole to BGP peered clients as part of the service.  You can advertise any /32 of your own IP space to the peer and the ISP will then upstream black hole traffic being sent to that IP address.   Obviously, when you choose to do this the DDoS has won as you are voluntarily taking the IP address from your own space offline.  But this can be the best option available to prevent collateral damage in an active attack.   You can also change DNS for the applications under attack to use a different IP in your space at the same time to transition the service.  In anticipation of this type of move you should set a TTL of 5 minutes on your production DNS records that may make use of this method to assist in transitioning them in a reasonable amount of time should the need arise.   ... View more

Correct, no current feature.  Do contact your sales engineer and vote for FR 3159. PAN maintains an internal database of customer "Feature Requests" and each is assigned an ID number. Companies can add the "vote" for specific requests via your sales engineer.   Highlight Unused Objects FR  3159   ... View more

No, the DLP feature is deep inspection based on pattern matching and regular expressions.   ... View more

Note how low that FR number is.  We have been asking for "commit confirmed" for a long time.   But please contact your Sales Engineer and add your company vote to FR 204.  Keep hope alive.   ... View more

PAN notes full support for Hyper V.  Is there some MS certification or other that is missing?   https://www.paloaltonetworks.com/products/secure-the-cloud/vm-series-on-hyper-v   ... View more

I have not done this particular move but have others where the interfaces were the same and where they are different.    If the OS version is the same And the interface numbers the same You can simply import the existing configuration   You will need to edit the interface names throughout the configuration if they are different.  But it looks like your two models are the same.   ... View more

SE = Sales Engineer   PAN does not have an open access demo program you need to get authorized by an PAN employee or VAR typically the Sales Engineer.     ... View more