About RNC

Its an error/warning message indicating software failure. If it had occurred here, I would have raised a case to get in investigated. I had a couple of things fixed in the GP client by raising them as issues with Palo Alto Networks. "I get two occurrences of Windows announcing "Global protect has stopped working" giving me the options to close the program or retry." ... View more

This is not mentioned in the release notes. PANORAMA 5.1 introduced 64-bit mode VMWARE machine. I believe - based on these forums - that it also improved the way that the log indexing worked, in that it replaced the genindex.sh route that is called every 15 minutes with a python script. At the moment 4.1 and 5.0 management plane slow down every time genindex.sh runs, Assuming my understanding is correct :-), and its real, has this improvement been rolled into 6.0 for Devices and Panorama? I know logging performance is not very exciting but it becomes important when it impacts performance on a busy device. Thanks ... View more

"show system resources follow" is also useful. keep an eye on the wa%, as this reflects the amount of time the system is waiting on i/o. It ought to keep in low single figures. the mangement, device and logs servers will be busy. " less mp-log mp-monitor.log"  "less mp-log mp-monitor.log.0" etc will let you look at a record of system state the devices keep. It includes the show system resources output, and its useful if you want to see how your system has behaved over time. if you have not used "less", before, its a pager tool from linux/unix. google 'man less' for details. forward slash / for search forward, ? for search backwards are handy. ... View more

I believe PANOS also logs URL each time you re-match against an app-id if a URL log profile is applied to the rule. So if you match facebook (as an example), you may see the URL logged twice, as a log event is triggered for a the inital match of web-browsing. You may only see this in detail if log container pages is switched off. My experience is to that you need to watch out for i/o loads on the device caused by URL logging. The rates can get out of hand easily, which has knock on effects on other sub-systems. The SDD based devices have better i/o, but if you intend to log up to Panorama, then keep that in mind too. ... View more

What are the benefits of PAN URL-DB over BrightCloud to your customers? Kind regards & Thanks. ... View more