About pulukas

There is also now a official tech document on the configuration of Predefined syslog filters. How to Locate the Predefined Syslog Filters in PAN-OS ... View more

No Policy based routing cannot be imported into dynamic protocols like OSPF or BGP.  These policies have only local significance to the router on which they are created. ... View more

I should have asked about workstation versus esxi.  I've seen that same issue with other appliances in vmware workstation. Best solution is to virutalze esxi into workstation and install them there. ... View more

Are there any entries in the windows server event log for these time periods? ... View more

Do you have any nat interface for this zone? If so, check the nat logs screening by this port. ... View more

See if clearing the site cookies works for this issue.  SSL Decryption Stops Working on Firefox Browser After Changing SSL Decryption Certificate ... View more

I am a little confused by the question. Is the reason you want two tunnels to keep traffic separate for policies? If so, you should be able to accomplish this task with a good zone layout on both firewalls and still use the same tunnel. can you speak a little more on the communications layout and what you want to secure? ... View more

According to VMware, best practice is to have vm-tools installed on appliances that companies offer for sale. Best Practices for Building Virtual Appliances http://www.vmware.com/files/pdf/Best_Practices_Building_Virtual_Appliances.pdf ------ Additionally, there are some best practices that relate to the portability and performance of your virtual appliance. The most critical of these is that your virtual appliance should be build using SCSI virtual disks. It is also important that your virtual appliance includes VMware Tools. VMware Tools provides optimized drivers for VMware virtual hardware and management tools that can monitor and manage the virtual appliance with VMware VirtualCenter. ... View more

The base license of Panorama will handle 25 firewalls. The document is referencing how much memory you should allocate the virtual appliance for a small installation of 10 firewalls or less and the larger installation.  Simply allocate more ram to your appliance in vmware and you will be good to go. ... View more

This answer is crazy. Virtual routers exist because we want separation in routing between the devices.  Why cripple this ability by preventing a basic function like ip address assignment in different virtual routers. I hope this is on the near term roadmap to fix.  I would classify is buggy behavior. ... View more

Yes, asymmetrical routing will cause all kinds of headaches.  Glad you have it worked out. ... View more

Unfortunately, there is no app-id for this scenario. But you can still do a traditional set of firewall rules. Allow outbound imap pop and smtp to the gmail servers listed in the outlook setup with the specified ports. Get started with IMAP and POP3 - Gmail Help Allow outbound smtp to all of the gmail mx record servers listed here. MX record values - Google Apps Administrator Help ... View more

I upgraded our 4.1 appliances to the 5.0.6 last year and later up to 5.0.9. You do need to download and upgrade to 5.0 first.  This requires a reboot. Then a second upgrade to your desired final version of 5.0.11 with a second reboot. ... View more

What virtual router is the trust interface in? I suspect your trust interface is in another VR that does not have the route to the Holland vr. ... View more

If the application is showing up as unknown, you can follow the steps in this document to submit Viber to the App-id team for identification. Identifying Unknown Applications ... View more