Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About batd2
About batd2
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Wednesday
@benatddsnetwork.com Did you recently update your PanOS? We had a problem with scp after upgrade to 8.1.13 and the response from support was that they had fixed a few OpenSSH vulnerabilities in the recent update, which changed some ssh/scp behaviour.
... View more
3 weeks ago
@ksteves1 Thank you. It an old post, but I was stuck and this response helped me fix the script I was working on. "xml_result()" was the bit I was missing. pan.xapi is amazing and does exactly what I need.
... View more
3 weeks ago
@umar00o The general Palo Alto best practices recommendation is to apply zone protection to all zones, however realistically there is no much use for ZP on it.This is just a virtual interface used only for the GP tunnel binding and there will not be much of benefit in using zone protection.
... View more
3 weeks ago
I did some work with pandevice and I am able to create new configuration in a Firewall, but struggling working with the existing Panorama configuration. Can you please help me with ideas for the below. I need to move a firewall between panorama appliances and the task is: Given the firewall serial, find the Template Stack and Device Group the firewall is assigned to in PanoramaA. In PanoramaA find the Template members of the Template Stack and Parent Groups for the Device Group. Copy the Device Groups, Device Group Inheritance, Template Stack and Template from PanoramaA to the new PanoramaB.
... View more
3 weeks ago
@Sethupathi I think the initial connection is still over SSL and after authentication the traffic tunnel is either IPSec or SSL. Also, I don't think you can have IPSec only mode and you always need SSL failback.
... View more
4 weeks ago
1 Kudo
@LucaVitali I think the your approach is slightly wrong. You can load any part of the configuration (e.g. address objects), but you can't directly load the whole configuration file, but exclude some conifg items. I am not sure why exactly you need to do that, but one way to automate it could be to take the current config of the " /config/shared/local-user-database -user-database" then load the old configuration snapshot file and have a second API call to load the most up to date content of " /config/shared/local-user-database -user-database".
... View more
03-03-2020
02:14 AM
@BPry Thank you for your quick response. That makes sense appart from " this rule will work exactly as you would expect it " I did some more testing and looks like that traffic with unidentified AppID is just being allowed and logged as matching this rule, even though the rule has action "Deny". So is it right to say that all unidentified AppID traffic will just be let in?
... View more
03-02-2020
07:23 AM
It is not clearly described in documentation and I could not find a complete topic related to it. How does application:any, service:application-default behaves when apply to a “Deny” rule? Presumably it will block the application if application is detected on a default port, but normally deny rules do not have recognised application, because of not enough packets to detect the application. How will application be detected? Also how will “application-default” rule behave (regarding if deny or allow) in the following cases of a traffic with AppID: Incomplete Insufficient-data unknown, apps with ports “tcp/dynamic” or “udp/dynamic” (e.g. torrent) apps with port not defined (e.g. icmp)
... View more
02-28-2020
08:48 AM
@Chris-UNN Is it possible that your colleague configured it as "bi-directional" or Destination NAT? In this case, the firewall will use ARP to indicate to its neighbours that it owns the IPs and traffic can be sent to it.
... View more
02-28-2020
08:18 AM
Do you know where in CLI or configuration files we can find Panorama Template objects which were locally overridden on a firewall? I am trying to script for locally overridden configuration settings checks of multiple Panorama-managed firewalls, but noting in the configuration files indicates that the object was overridden. Do you have more inside understanding of how the override process works and how is it processed by the firewall?
... View more
02-28-2020
07:06 AM
@Chris-UNN This is can happen when you misconfigure NAT and put a mask to the NAT IP addresses.
... View more
02-20-2020
07:21 AM
@AlexanderAstardzhiev I am not sure what Panorama model and PanOS version you have, but we have physical M applience on 8.1 and the interface troubleshooting commands are there, e.g."> show interface ethernet1/2", "> tcpdump interface ethernet1/2" .
... View more
02-20-2020
07:10 AM
@Sethupathi As the file does not act as proxy for the traffic, it is not able to modify the HTTP header and insert "x-forwarded-for"
... View more
02-20-2020
06:44 AM
@sahithyan.subbu I agree that it is not the recommended way to monitor CPU use, but In it can possibly be done. As long as there is a log for the even, you can build very specif filter (e.g. "description contains 'cpu'" or similar) and trigger email alert when log matches the filter.
... View more
02-20-2020
05:41 AM
@SutareMayur The authentication methods will be executed in order. It will go to the second login method only if the first method fails. You can check your authentication logs, but probably this is what is happening.
... View more
02-20-2020
04:41 AM
@Sistemas_SanLucar There is no webpage as such. I think that the normal process is to raise it with your assigned by Palo Alte SE and they will submit a feature request.
... View more
01-27-2020
07:30 AM
I need to automate run particular operational commands , which were not available in the API. I tried running them using SSH to the Panorama CLI, but it fails. Also Paramiko Python script does not seem to work and not sure what are we doing wrong. Can you please share any experience exectuing SSH commands?
... View more
Friday
19Posts
1Like
1Solution
Apr 03, 2020Last Visited
User
Activity
User
Profile
Latest posts by batd2
| Subject | Views | Posted |
|---|---|---|
| 50 | Wednesday | |
| 270 | 3 weeks ago | |
| 151 | 3 weeks ago | |
| 169 | 3 weeks ago | |
| 220 | 3 weeks ago |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 4 weeks ago |
User Badges
Public Statistics
| Date Registered | 01-17-2020 07:36 AM |
| Date Last Visited | Friday |
| Total Messages Posted | 19 |
| Total Likes Received | 1 |
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
Friday
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
