About RNC

rbergen wrote: 100% management CPU bug, etc. Yeah, and PA's answer to that one is 'upgrade your hardware' if you're unfortunate enough to run a 2000 series. ... View more

"show system resources follow" is also useful. keep an eye on the wa%, as this reflects the amount of time the system is waiting on i/o. It ought to keep in low single figures. the mangement, device and logs servers will be busy. " less mp-log mp-monitor.log"  "less mp-log mp-monitor.log.0" etc will let you look at a record of system state the devices keep. It includes the show system resources output, and its useful if you want to see how your system has behaved over time. if you have not used "less", before, its a pager tool from linux/unix. google 'man less' for details. forward slash / for search forward, ? for search backwards are handy. ... View more

I believe PANOS also logs URL each time you re-match against an app-id if a URL log profile is applied to the rule. So if you match facebook (as an example), you may see the URL logged twice, as a log event is triggered for a the inital match of web-browsing. You may only see this in detail if log container pages is switched off. My experience is to that you need to watch out for i/o loads on the device caused by URL logging. The rates can get out of hand easily, which has knock on effects on other sub-systems. The SDD based devices have better i/o, but if you intend to log up to Panorama, then keep that in mind too. ... View more

What are the benefits of PAN URL-DB over BrightCloud to your customers? Kind regards & Thanks. ... View more

@rotra Good to hear that this has been resolved.  For those of you in a similar situation, please remember that you must enable the setting "Dynamic URL Filtering" to access the BrightCloud database in the cloud for the latest categorization information.  Otherwise, the URL filtering engine will only check for categorization on-device.  If the specific URL you're looking for is not stored on the device, it will return category "unknown".  Keep in mind that information is also cached on the device, so if you enable the dynamic URL filtering setting after you've started, you should use the "clear url-cache" command to clear the cache and force a cloud lookup for the latest categorization.  Otherwise, you will use the cached category until that entry expires in the cache. Hope this helps, Doris ... View more

Content is released every Tuesday evening.- Pacific Time. ... View more

You need to enable ssl-termination in order to be able to inspect the contents of ssl/https streams. ... View more