Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About Gchander
About Gchander
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
11-15-2019
10Posts
0Likes
0Solutions
Nov 15, 2019Last Visited
User
Activity
User
Profile
Latest posts by Gchander
| Subject | Views | Posted |
|---|---|---|
| 1036 | 11-15-2019 12:46 AM | |
| 2220 | 11-14-2019 06:02 AM | |
| 1793 | 10-09-2019 06:59 AM | |
| 1803 | 10-09-2019 06:45 AM | |
| 1811 | 10-09-2019 06:21 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 |
User Badges
Public Statistics
| Date Registered | 01-21-2019 07:12 PM |
| Date Last Visited | 11-15-2019 04:07 AM |
| Total Messages Posted | 10 |
11-15-2019
12:46 AM
Firewall upgrade/replacement Dear All, Can anyone please advise on any specific points to be taken care for a hardware replacements for a pair of firewall 5060 fully managed by Panorama & to be replaced with 5250. To me a high level plan looks like. 1. Prepare the new firewalls via importing device state with new mgmt ips to avoid any duplicate in network. 2. Test the failovers on the new pair. 3. Add the panorama server ip in the new firewalls. 4. Add the new serial numbers of the new firewalls to the Panorama under managed devices, match the threat & antivirus version, migrate the license? 5. Change the policy target to any in case of if any specific target group was selected. 6. Disconnect the secondary firewall to be replaced & power on the new 5560 unit. 7. Double check the priority on the firewalls to avoid any issues with taking over issues & make it the active. 8.Push the policy on the secondary firewall. 9. Create the device group. Is there any thing else needs to be taken care? Does anything related to master key is required?
... View more
11-14-2019
06:02 AM
Dear All, Can anyone please advise on any specific points to be taken care for a hardware replacements for a pair of firewall 5060 fully managed by Panorama & to be replaced with 5250. To me a high level plan looks like. 1. Prepare the new firewalls via importing device state with new mgmt ips to avoid any duplicate in network. 2. Test the failovers on the new pair. 3. Add the panorama server ip in the new firewalls. 4. Add the new serial numbers of the new firewalls to the Panorama under managed devices, match the threat & antivirus version, migrate the license? 5. Change the policy target to any in case of if any specific target group was selected. 6. Disconnect the secondary firewall to be replaced & power on the new 5560 unit. 7. Double check the priority on the firewalls to avoid any issues with taking over issues & make it the active. 8.Push the policy on the secondary firewall. 9. Create the device group. Is there any thing else needs to be taken care? Does anything related to master key is required?
... View more
10-09-2019
06:59 AM
Yeah, I agree with that, let me do it active/active & will update you, it might be a possibility with version 14.1x53 I'm running on the switch. Thanks for all your help & thoughts. Regards, Ganesh
... View more
10-09-2019
06:45 AM
Well, that is because it worked that way, the recommendation also says that you must have atleast one side as active & it should be ok. although if I think more deeply keeping active/active both side will make both the devices to send PDU's so an increased traffic or so. Would u mind sharing the software version of both sides, I have 14.1x.53 on Juniper & 17.1.18 on PA side. Regards, Ganesh
... View more
10-09-2019
06:21 AM
We are also facing the same issue and we have a setup of Juniper & Palo alto. Juniper side it is LACP active with fast & palo is passive with fast. Does anyone else have the similar issue? Regards, Ganesh
... View more
09-13-2019
02:39 AM
Can DSRI be enabled for any thing any rule or is this only helpful in case of HTTP requests.
... View more
- Tags:
- RI
08-29-2019
07:08 AM
but isn't recommended to always do the config on active ? if that why it is recommended I'm curious to find out that for any kind of abligation! Regards, Ganesh
... View more
08-29-2019
05:59 AM
Dear All, As I have always been practicing to do the configuration and changes on the primary device and then it is its responsibility to push the configuration on the secondary device but as I have also been seeing people to do the configuration on the secondary devices be it juniper, F5, Palo and they really don't consider this active passive state and also I have not seen they encounter any issue too doing this, I wanted to check with you all if there is really a problem or is it always safe to do this stuff without running into nay kind of mess. Though the HA state always says peer so can it be done either way and if there would have been any problem with this may be the code developer had restricted this while they create it. Regards, Ganesh
... View more
03-06-2019
06:25 AM
Thanks ShaiW for replying, can you please confirm me the function of this command here " delete import network interface ethernet1/20.111" & is this a tested solution for both physical and VM based deployments? I think you can only do it one by one, do u have any command for a range like cisco. Thanks for all your help! Regards, Ganesh
... View more
- Tags:
- s Sa
03-06-2019
05:02 AM
looking for the cli command to delete multiple subinterfaces in one go. Seems like it can be done?
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
