About rodvand_de

rodvand_de · ‎06-12-2019

Hi, When generating a flow basic log - is there any way to export just the pan_packet_diag.log using scp? According to https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClpFCAS the file wiil be included when exporting a TSF, but it would be useful to be able to export the single file...

rodvand_de · ‎05-07-2019

Do the operation in CLI first with the "debug cli on" command activated. This will give you the precise path you need for the API call. See https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-panorama-api/get-started-with-the-pan-os-xml-api/explore-the-api/use-the-cli-to-find-xml-api-syntax

rodvand_de · ‎02-06-2019

Yeah, in most cases the online BPA is better to work with. In other use cases the configuration cannot be uploaded to the BPA due to restrictions, and that is why I am trying to find a way of using Expedition for this.

rodvand_de · ‎02-06-2019

Hi, I'm using Expedition for the BPA part at the moment. Is there any way of "refreshing" the configuration I'm working on after making adjustments after running the BPA? At the moment I need to create a new project to fetch any new configuration. My expected workflow: - Import device configuration to project - Run BPA - Adjust according to the BPA - Refresh the configuration from the device - Run BPA - see the improvement Any way of achieving this?

rodvand_de · ‎01-23-2019

Under a device in Expedition there is a tab called Real-time updates. It seems to be a syslog receiver for changes. Can someone confirm how to use this feature?

rodvand_de · ‎12-22-2018

Hi, Have you looked in the "session browser" for the session? It will show which rule is being hit. Otherwise you can "test" the security policy in CLI by using some of the test commands (https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-cli-quick-start/use-the-cli/test-policy-matches.html#69222)

rodvand_de · ‎12-21-2018

- Make sure you are logging this traffic. If you think it hits the default intrazone rule you need to explicitly set it to log traffic. - If this is a long lasting session, check the session browser to see if you can see it there. - Try to log at session start as well as session end.

rodvand_de · ‎12-16-2018

What release are you on? In 8.1.4 there's a bug involving the HA1-B does not come up as expected. Fixed in 8.1.4-h2 and later. From the release note on 8.1.4-h2: PAN-107271 Fixed an issue on a PA-3200 Series firewall running PAN-OS 8.1.4 in an HA configuration where the HA1-B (backup) port did not come up as expected.

Member Since	‎12-03-2018 08:28 AM
Date Last Visited	‎11-02-2020 05:31 PM
Posts	9
Total Likes Received	1

Online Status	Offline
Date Last Visited	‎11-02-2020 05:31 PM

About rodvand_de

Any way to export pan_packet_diag.log?

Re: API to create Address Group

Re: Refresh Configuration for BPA

Refresh Configuration for BPA

Real-time update tab in Devices

Re: HA Configuration on PA-3220 - HA1 is UP but HA1 Backup is Down

Reducing Management Plane Load (pt. 1)

Did You Know: Batch (.bat) File Analysis

Copying Configuration From One Firewall to Another

Re: Any way to export pan_packet_diag.log?

Re: Application Dependency Warnings even when allowing required apps