About ikinnexi

Hey guys, Has anyone ever got the PAN ID XML API to work with rsyslog? I am trying to parse my VPN Concentrator Logs (which are sent to my rsyslog server) and see if I can run it through the API module which will then send the data over to the PAN UserID Agent. I am writing a simple perl script to scrape sample VPN log data first and then port that over using the API to the UserID Agent. I am also curious on how to have this script generate as a scripted action for every log match so that it will consistantly update the PAN UserID Agent. Any help or ideas that you guys can provide would be awesome. Thanks. Brian ... View more

Hey Guys, I was curious if there was a way to run a command remotely via SSH to the PAN Device to dump configs. I was thinking of a way to dump the output of "pa2050-1> show config running" to a flat file that I can hopefully do version checking on. However, when trying the following SSH command, it seems to not work and hangs the connection up: $ ssh user@pa2050-1.test 'show config running' Is there another way to do it? Let me know if you guys have tried anything similar. Thanks. Brian ... View more

Hey Guys, I have the Palo Alto App working for the Threat/Traffic Logs. However, I would like to do the same for the Data Filtering / URL Logs. Is this possible? Let me know if it is and how to do it. Thanks. Brian ... View more

Hey Guys, I recently implemented a SSL Decryption Rule to decrypt SSL traffic between my users and a particular destination so I can apply a Data Filtering Rule to it. Everything appears to be working except that it seems like the User Identification piece is not working.. User Identification appears to be working for everything else except my decrypted SSL Traffic. Any reason why this is happening? Is the user ID info somehow getting lost in the decryption/re-encryption process? I am running PAN-OS 4.0.9. I am implenenting a ssl-forward-proxy rule along with a data filtering rule to detect credit card data (default). Let me know if there is anything I need to do to get this working. Thanks. B ... View more

Hi, Has anyone ever tried to clone malicious traffic sent through the palo-alto firewall to try to re-simulate attacks or exploit vulnerabilities? If you have, can you share your experience in how you did it? Just trying to research on some ideas of how to seek exploit possibile vulnerabilities based on traffic that I might think is malicious. If you need some more info, let me know. Thanks. BA ... View more

Hi, I'm new to setting up SNMP and need help. Our Network Engineers need to setup their Orion NPM to monitor our 3 Palo Alto 2050's via SNMP. They basically only need to monitor CPU, Memory, and Link States of the 3 interfaces hooked up for each of the 3 Palo Alto 2050's we have setup. Can someone walk me through this as far as how to setup community string on PA-2050 side and how to load the MIB modules? I'm pretty new at this so not sure how this works exactly. Do the MIB modules need to be loaded on the PA side or the Orion NPM side. Any help you can provide would be of great help to me. Thanks. BA ... View more