About snekkanti

Hello, I recommend a subscription to the following: Wildfire URL Filtering App/Threat   You can use something else for secure DNS or can use Palo Alto's. But this is the reason why we pay for the subscriptions.   Regards, ... View more

Hi All, There was a 15 min downtime when customer working on replacing the Passive device in a A/P pair with RMA device. Soon they connected HA1 (Aux1) cable only to New RMA device (no interfaces connected bcz link monitoring was enabled), there was split brain scenario for few mins where peer firewall running active became passive and dropped traffic. Customer suspended the new RMA device and both firewalls recovered from split brain scenario and the traffic was passing through expected firewall (Active Firewall). My question: With preemption disabled if split brain scenario occurs in A/P pair, after recovery from split brain which firewall owns the active state?? ( my answer is firewall that has lowest priority will have the Active role after recovery even the network interfaces are not connected and link monitoring also enabled on these interfaces ). Thanks in advance.   ... View more

  We see this on PA 5220 running 8.1.9. Packet  descriptor average is below 80 but spike goes to 100 very often ... View more

In case anyone is looking for a Docker container rather than a VM, see my post https://live.paloaltonetworks.com/t5/Expedition-Discussions/Docker-Container-for-Expedition/m-p/290790#M2036 ... View more

Hi, Our M-500 is running on 8.1.6 and reported a configd core. Whats the best log to look into why the configd crashed with "configd: exited , core True, Exit Signal: SIGABRT"?? Thanks ... View more

This looks like an OP command, so you just use panos_op to do this:   - name: Perform Swap   panos_op:     provider: '{{ provider }}'     cmd: '<replace><device><old>*old device serial number*</old><new>*new device serial number*</new></device></replace>'     cmd_is_xml: true ... View more