About ajr13

ajr13 · ‎04-16-2019

personally would prefer ISO, the qemu method did not immediately work and did not have time to figure out why. thank you for responding and sorry for the late response, I just noticed 'alerts' near my name and did not know about them. thank you!

ajr13 · ‎01-28-2019

this may be a silly question but is there a docker version available for Expedition? thought I would check here. thank you!

ajr13 · ‎12-07-2018

thanks thought I was losing it and began to look for how to change from cli...

ajr13 · ‎12-07-2018

Oh this is awesome! previously I had been doing cli gymnastics on 'set' commands and find all replace actions for log setts and security profiles. would also be nice to have this feature in Panorama/Panos itself 🙂 Thank you!

ajr13 · ‎11-07-2018

good to know, thanks!

ajr13 · ‎11-07-2018

I noticed three checkpoint firewalls ina row that the interface IP's seem to reset to x.x.x.0 instead of .1 (or whatever it is) during migration and I did not see errors under monitor. really not a big deal tool works great otherwise just thought I would share in case I am missing something and someone has a better solution to avoid this. please let me know.

ajr13 · ‎08-13-2018

Thanks for posting, I was looking for information on the same challenge, it appears it will be a manual process. was there a simply way that you found to export the entire config as a 'set' type of export from the web gateway? right now it looks like it will be piecemealed xml files

ajr13 · ‎06-18-2018

sorry I misread your question, I thought you asked about removing unused objects. I have not observed objects with the same name and value being used in a panw config before. I assume when you import it will simply take the last in the row of duplicates if in fact the same value and name are being used. from experience I know if you have the same name with different values, the import via load config partial will take precedence (in 7.x versions, not sure if anything has changed.) so same name and different values could cause a headache.

ajr13 · ‎06-14-2018

check on the objects tab in the bottom right, hover over the red dot, that will remove unused objects.

ajr13 · ‎06-04-2018

@UmerKamal see if this [0] article helps, at some point virtualization may either have been disabled or never enabled. [0] https://techsviewer.com/enable-intel-virtualization-technology-vt-x-bios/

ajr13 · ‎06-04-2018

my recommendation is to migrate everything to panorama and centrally manage everything. In panorama you asre able to stop it from pushing addresses that are not locally in use from the local firewall which may help mitigate this issue you are having. from the panorama admin guide -->Clear the Share Unused Address and Service Objects with Devicescheck box to push only the shared objects that rules reference, or select the check box to re-enable pushing all shared object Additionally, expedition like previous versions is capable of removing unallocated objected by going to the 'objects' and clicking the red dot at the bottom right (in expedition it may be in the middle in MT3 if I recall correctly)

ajr13 · ‎06-01-2018

this is awesome, thanks!

ajr13 · ‎06-01-2018

thanks! this also works in case someone does not readily know commands to use vi and for whatever reason still have not learned the hotkeys escape keys etc... (for example... me) sudo sed -i 's/upload_max_filesize = 2M/upload_max_filesize = 250M/g' /etc/php/7.0/apache2/php.ini sudo sed -i 's/post_max_size = 8M/post_max_size = 128M/g' /etc/php/7.0/apache2/php.ini then sudo systemctl restart apache2

ajr13 · ‎05-31-2018

assume it has changed since this post? for 2018-05-31 I get the hash below. $ md5sum Expedition.tgz c2c90bfe76d536e8582d653c5c0afb24 Expedition.tgz (tested on two different machines however they are on same network....)

ajr13 · ‎05-25-2018

this is great, will spend time wrapping my head around this. Thank you! EDIT: after looking at some of this I was not even aware of this library, wow this is really great. Thank you again for sharing!

ajr13 · ‎05-24-2018

this is great info, I am restricted to python3.x at the moment but I will benefit from this. thanks again!

ajr13 · ‎05-24-2018

that might work, I was not able to satisfactorily use python3.x to convert it correctly, very likely it is my lack of knowledge though which is why I was trying this alternative method. have any literature you can share that may assist?

ajr13 · ‎05-23-2018

I might be missing it however does anyone know if the configuration table export option [0] is available through the api? my goal is to obtain this via api if that is an option. after going through the api browser and check export/show command I am not seeing this functionality anywhere. [0] https://www.paloaltonetworks.com/documentation/81/pan-os/pan-os/firewall-administration/use-the-web-interface/export-configuration-table-data

ajr13 · ‎03-15-2018

8.1 now has this available in gui should be fairly straightforward to use xml api to find xpath to make python script

ajr13 · ‎09-25-2017

please try these, keep in mind I have only played around/tested these with data patterns and have not verified in a production environment the validity. for example, I think ammex is 1234-123456-12345 5376-4698-9386-4886 5564-8017-1758-1316 5464-9730-1302-5263 5257-2750-0534-2578 5564-9616-5310-6823 5483-3128-3984-7229 5352-9543-2663-9003 5130-0484-5710-3076 5210-3641-5712-1745 5559-4615-4452-4711

ajr13 · ‎08-30-2017

@cdp181 wrote: Our Palo partner suggested a 72 hour delay on content updates. Interestingly you don't seem to be able to configure a delay in Panorama only on the devices themselves. FYI on panorama 7.x.x and above I think this option is available. It may be available prior to that release but I cannot confirm,.

ajr13 · ‎05-05-2015

Yes it must have just changed within past day or two as my logs in PA show it as Malware on 05-04-2015 at 11:37 est. however, I'm still curious as to why it was listed as malware for a brief period of time 🙂

ajr13 · ‎05-05-2015

Thanks, everything in virus total said it was clean --> www.neucoin.org. however PAN marks as Malware -- I have personal no evidence supporting it being malware or clean which is why I wanted to see reasoning from PAN. is there a way to follow up with PAN to determine reasoning? I do not want to submit a re categorization because I do not know that it is clean.

ajr13 · ‎04-30-2015

Rajiv, Thanks, I am specifically looking for the reason why a URL was chosen to be categorized as malware -- for example xyz.com is malware because software hosted on site was found to be distributing malware for command and control or Cryptolocker...

ajr13 · ‎04-30-2015

Someone shared a link with me to a new startup company and I found it had been blocked and listed as malware by a PAN FW -- I am curious if there is a way to determine exactly what occurred that made that site categorized as malware -- and how I can lookup other URL's reason for categorization -- if available. Thanks, A

ajr13 · ‎03-26-2015

+1 following if/when this is available.

ajr13 · ‎03-25-2015

+1

Date Registered	‎12-10-2014 08:58 AM
Date Last Visited	‎02-25-2020 09:54 AM
Total Messages Posted	36
Total Likes Received	6

Online Status	Offline
Date Last Visited	‎02-25-2020 09:54 AM

Strata

Prisma

Cortex

About ajr13