About FarzanaMustafa

@kiwi    Can you please post the link here? ... View more

@mypasecure2017    Maybe try these two suggestions.   https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CltWCAS   https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boNjCAI ... View more

Sorry, just clicked Resolved too soon.   If we only import dc2-firewall-01_002501002685.xml, this file does not have all the config. The file “Panorama_000702870043.xml” has most of the config ( which also includes dc1’s config) so if we need to restore dc2 firewall config – under this scenario – what is the full config restoration procedure for dc2 only? ... View more

Strange...I have very different experience with Support. So far, it has been fast response (depending on the Severity of the ticket). On some occasions it can take a while to get hold off an engineer but they compensate it with their exceptional service and knowledge. I usually deal with one particular zone based team so my experience may be different to yours.   ... View more

@RobinClayton @kiwi  Editing my response.   The device is managed by Panaroma. I have tried via Panorama as per the link (thank you!) and this one exports the config as following and the Panorama_000702870043.xml apparently has all the config- including both the firewalls. What do we do when we need to restore a config for one firewall? example dc2 firewall. Say, dc2 firewall died and we received a blank replacement – in that case we need to restore dc2 config only. How is this to be done? ... View more

Thank you @kiwi for the response.   My question was how to use QoS for each user. I have checked the link below and I think it is bandwidth guarantee for a single user, means we need to create one policy for each user? In the example, only the CEO is in the policy, he will get at least 50mbps, what if we add another user in this policy, will they have to share 50 or 50 for each?   https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/quality-of-service/qos-use-cases/use-case-qos-for-a-single-user   ... View more

Hi @baz00r    I read the article below and it says PA doesn't support policy based VPN. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClW8CAK   Also, the KB below doesn't mention anything specific about order of proxy-ids. Just talks about selecting PA as either initiator or responder when using multiple proxy-ids. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClUFCA0 ... View more

Hello @welly_59    We had similar problem earlier and PA TAC assisted us in resolving the issue. Below are the things to check/configure: --FQDN configured properly --Try a portal config refresh: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClF1CAK --Try latest GP version ... View more

Hi @DavidNapolitan    There are some KBs/threads on this. Please check below. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClozCAC https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmA4CAK https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaUCAS https://live.paloaltonetworks.com/t5/General-Topics/Unable-to-see-traffic-in-the-Monitor-tab-gt-Traffic-section/td-p/95708 ... View more

@MP18    Yes. ... View more

Hi @MP18    test authentication authentication-profile LDAP-Profile username User4-LDAP password can be used to verify username/password once LDAP connectivity has been established.   You can’t use the command to verify the service-account, because it requires LDAP connectivity… which is failing to connect. ... View more