About junaid.khan

did not help either,  ... View more

yes tunnel is up between the two gateways but no traffic is going through the gateways. IPSEC status shows UP. cleared the arp. rebooted the firewall. didn't help at all. This was all working fine until this morning. Then as a last resort, removed VPN config and re-built it from the scratch and that got it working. The puzzling thing is " what happened that killed the connection" every thing was working just fine and then this. Weird!! ... View more

Hi Sandeep, May i know why ECMP is not supported ? What it takes to request it? I requested this back in 2011 and nothing happened since then. I would like to know, Why PA doesn't want to include ECMP ? ... View more

Ah I'was looking for the same. Hope this fixes our issue. However, I can't jump on 5.0 and upgrade our panorama cluster or the devices. We just moved from 4.0.11 to 4.1.7hfa2. I don't see 5.0 happening to us any time soon. I wish there was other alternative to this resolution other then manually converting shared objects to device group specific. Thanks Junaid ... View more

I got few data pattern filters in place and we are seeing, what is expected to see. Just curious, how does the matching data filter is taking place for things that are going over https?, We don't have https/ssl decoding enabled on the firewall. Rgds Junaid ... View more

Good discussion, We are looking for similar filtering for any HTTP or HTTPS post, instead of blocking we would like to capture whats been posted and log it. So, that it could be used for investigation purpose. Is this something possible using PAN products? ... View more

Thanks, It turned out to be management process chewing up memory. temporary fix was to reboot the system or restart the management server process, Permanent fix seem to be implemented in 4.0.9 code. We updated our boxes to this code last week and since then, not seeing this issue. Rgds Junaid ... View more

Just wondering if this feature request was ever implemented. We are also in the same boat. We got Panorama 4.1.2 and Firewall devices, They all sending traffic/threat/datafiltering and other logs to Panorama, We would like to see if the same logs could be forwarded to SIEM. Appreciate the answer. Thanks Junaid ... View more

We are seeing the following since yesterday on PA 2050 running 4.0.5 code. Show Jobs output 2011/11/15 02:38:50        3017      FqdnRefresh       FIN   FAIL 100 %     2011/11/15 02:08:44        3016      FqdnRefresh       FIN   FAIL 100 %     2011/11/15 01:38:35        3015      FqdnRefresh       FIN   FAIL 100 %     2011/11/15 01:08:27        3014      FqdnRefresh       FIN   FAIL 100 %     2011/11/15 00:38:22        3013      FqdnRefresh       FIN   FAIL 100 %     2011/11/15 00:08:13        3012      FqdnRefresh       FIN   FAIL 100 %     2011/11/14 23:38:07        3011      FqdnRefresh       FIN   FAIL 100 %     2011/11/14 23:07:59        3010      FqdnRefresh       FIN   FAIL 100 %     2011/11/14 22:37:51        3009      FqdnRefresh       FIN   FAIL 100 %     2011/11/14 22:06:58        3008      FqdnRefresh       FIN   FAIL 100 %     showing fqdn table, unable to resolve IP address to dns. FQDN Table : Last Request time Wed Nov 16 14:48:00 2011--------------------------------------------------------------------------------                      IP Address     Remaining TTL     Secs Since Refreshed--------------------------------------------------------------------------------VSYS  : vsys1 cdn.redhat.com  (Objectname H-cdn.redhat.com):                     Not resolved git.kernel.org  (Objectname H-git.kernel.org):                         Not used gsyprf10.external.hp.com  (Objectname H-gsyprf10.external.hp.com):                         Not used mirrors.kernel.org  (Objectname H-mirrors.kernel.org):                         Not used subscription.rhn.redhat.com  (Objectname H-subscription.rhn.redhat.com):                     Not resolved test.kernel.org  (Objectname H-test.kernel.org):                         Not used xmlrpc.rhn.redhat.com  (Objectname H-xmlrpc.rhn.redhat.com):                     Not resolved VSYS  : shared Ping seems to work just fine with the dns name. FW1(active)> ping host cdn.redhat.comPING e4177.g.akamaiedge.net (173.222.128.251) 56(84) bytes of data.64 bytes from a173-222-128-251.deploy.akamaitechnologies.com (173.222.128.251): icmp_seq=1 ttl=59 time=6.58 ms64 bytes from a173-222-128-251.deploy.akamaitechnologies.com (173.222.128.251): icmp_seq=2 ttl=59 time=7.45 ms Any help would be appreciated. Thanks & Regards Junaid ... View more

I 'm running into a problem with SSL-VPN clients getting terminated with in 20mnts. Wether being idle or active with traffic tranversing the gateway. I'm not sure what is going on here. I tweaked the hourly time-out to 10hrs from 3hrs default but doesn't seem to help. Running 1.3.1-3 on client, Gateway is 4.0.4. Please let me know if anyone else is seeing the same and possibly have a resolution. Thanks & Regards Junaid ... View more