About upatino

Hello all, I had a problem with a PA-220, version 8.0.9. Suddenly I lost HTTPS service for the management interface, It was still working but I only had access via SSH. When I entered #show deviceconfig system service I couldn't see the services HTTPS & SSH (as disable-hhtps/ssh no) Then I entered #set deviceconfig system service disable-https no and then I was able to see the service. Anyway, I could enter via web (HTTPS) when I entered >debug software restart procesa management-server, I don't know if a process was frozen or something. My question here is: 1. Is there an issue with PAN OS 8.0.9 that causes I can"t see the services (even though they are enabled).? 2. Why does the Firewall loses the HTTPS service ? Thanks. ... View more

Hello,   I want to see the hops between the source and destination when I do tracert from my PC to an IP. The tracert is shown as completed.       I followed the following kb but didn't work: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfsCAC   I disable Zone protection from the Zone initiating the conection(Trust) a few minutes but only shows the Firewall's IP. Then I enable again Zone protection and I didn´t see any hops, just the trace complete.   I was wondering if this i s out of the reach of PALO ALTO & must be because of my ISP. -Note: Using a different ISP I am able to see the hops between the source & destination. ... View more

Hello,   I have two Domain Controllers, one is shown as Connected and the other is Not Connected.     -The 10.0.12.80 is a replica of 10.0.0.51. -The server 10.0.12.80 is reachable by the management interface.   -When creating the LDAP Server Profile & adding in the Server List the address 10.0.12.80, the Base DN does auto populate when clicking the drop-down arrow. I use the same user and password for the new LDAP Profile. -When adding group mapping and selecting the LDAP Server Profile created before, I do see the groups in that Domain Controller.     ... View more