About qasim02

Hi,   I am upgrading os for some 5260 this weekend however, just realised its showing app and threat mismatch. Upon t-ahooting I realised the management process on active firewall is showing Z defunct.   My understanding is that it is a Zombie process and I probably need to restart mgmt process.   However, as I will be failing over and firewall will be restarted as part of upgrade anyway so should I restart mgmt process or let it happen as part of the upgrade?   Would app and threat mismatch cause any issues with failover and the upgrade?   Look forward to hearing your expert opinion.    Thanks Kas ... View more

Hi,  I am upgrading so PA firewalls from 8.1.7 and 8.1.9 to 8.1.13, normally I wouldnt ask these questions but since these firewalls are extremely critical I need to be extra cautious.  been looking at the upgrade Matrix and couldnt see a clear answer but based on my experience I believe its a straight upgrade to 8.1.13 without any path, is that correct? secondly, these firewalls have bgp going through them (only static routing on the firewalls though with about 18 VRs), do yo recommend any specific checks? finally, these firewalls are decrypting traffic and have multiple Vsys's as well so do you recommend any specific extra checks?   thanks in advance.   Regards, ... View more

Hi,   I am about upgrade some PaloAlto firewalls with 10s of Vsys but wondering what would be a good report to generate to identify traffic flows for pre and post checks as well as identifying impact to services.   any help will be appreciated.   Regards,   ... View more