About snekkanti

Hi All, @OtakarKlier @silvioopt @Coldfirex  I am looking for answers to my customer questions, hope you can help me. Our customer dont have threat subscription but NAT was configured on firewalls, so installing updated content package on firewalls will not mitigate this issue. Any work  around without threat subscription?? Does decryption should be enabled as well to successfully mitigate this issue?? Does this applies to all types of NAT configuration like 1-1 NAT , many to one NAT etc.?? what are the exact configuration changes needed on threat profiles that applies only to NAT traffic to mitigate this issue. Thank you. ... View more

HI, Hope you can help me on this. I am looking to create a task for one of the CLI cmd "set deviceconfig setting management large core yes". I have the Xpath & XML format for this cmd. what is the module & format that helps me to execute this with no issues. Thanks  ... View more

Hi All, There was a 15 min downtime when customer working on replacing the Passive device in a A/P pair with RMA device. Soon they connected HA1 (Aux1) cable only to New RMA device (no interfaces connected bcz link monitoring was enabled), there was split brain scenario for few mins where peer firewall running active became passive and dropped traffic. Customer suspended the new RMA device and both firewalls recovered from split brain scenario and the traffic was passing through expected firewall (Active Firewall). My question: With preemption disabled if split brain scenario occurs in A/P pair, after recovery from split brain which firewall owns the active state?? ( my answer is firewall that has lowest priority will have the Active role after recovery even the network interfaces are not connected and link monitoring also enabled on these interfaces ). Thanks in advance.   ... View more

Hi, if we cannot delete these crash-info directory!. When will these directories get cleared?? I am trying to understand what process/mechanism the firewall performs to clear these directories . Thanks in advance. ... View more

Hi, Our M-500 is running on 8.1.6 and reported a configd core. Whats the best log to look into why the configd crashed with "configd: exited , core True, Exit Signal: SIGABRT"?? Thanks ... View more

Hi, Thanks for the response. I am thinking to convert the .ova to .ovf by using workstation pro, will that work on esx 6.0?, if not i have to go for your suggestion. Do we have any doc on how to do that? Thanks  ... View more

Hi,   Trying to install the latest expedition tool on vmx-12 (ESX version 6.0) and see Unsupported hardware family vmx-12 error. Where can i get the old .ova expedition image that supports vmx-12?  We dont have option of upgrading vmx or ESX to higher  Any suggestions on this would be helpful. Thanks  ... View more

Hi,   We see latency issues on Firewalls running on 8.1.6. Rule for the traffic is service based rule with port 80, 8081 & other ports.  User seems to be using "jfrog-artifactory' app for some file sharing and experienced latency. When we look into the resource monitor, packet buffers & sessions looks good but packet descriptors (on chip) (maximum) reaching 100.  An App-over ride rule for application "jfrog-artifactory' on port 80, 8081 is applied for ingress and egress traffic and values on packet descriptors value looks idle but we see 100 spike intermetivley. Any kind of answer is helpful to reslove this issue,    Thanks  ... View more

I have configured 1/1 as untrust layer 3 interface with a public IP connected to home router. My management interface is configured as 192.168.18.100. How do I access the WebGUI of this PA-200 using https://192.168.18.100 from my office which is 10.231.x.x desktop IP. This PA-200 is used as IPsec tunnel from my home to on premise ASA. ... View more