About Mohammed_Yasin

PA-5200 MIB file for SNMPv3 I need them for monitoring I find them here: https://docs.paloaltonetworks.com/resources/snmp-mib-files.html but the file type is .md5 and .my, but I need file type .mib or .smi to work in the monitoring software.   Where I can get those files for PAN-OS 10.1 ... View more

Please advise how can we retrieve the admin account passwords logs ( mean which account password was changed and when )? ... View more

where to check to troubleshoot the VM Series issue, as we are getting errors for the VM Series Plugin validation Failed. Please suggest if there are any specific logs or packet capture we have to look into.     Error : - Resource-mgr-endpoint is invaild. ... View more

When logging into Cisco AnyConnect VPN, the prompt: Login denied. Your environment does not meet the access criteria defined by your administrator.   After trying various methods, it cannot be solved: Then we have uninstalled the Traps - 7.2.2 from the machine,  the SSL-VPN started to work.   I mean the Traps Uninstall made the VPN works       ... View more

When logging into Cisco AnyConnect VPN, the prompt: Login denied. Your environment does not meet the access criteria defined by your administrator.   After trying various methods, it cannot be solved: Then we have uninstalled the Traps - 7.2.2 from the machine,  the SSL-VPN started to work.   I mean the Traps Uninstall made the VPN works   ... View more

I had disabled the agent from the portal, how to re-enable it back from the portal, please support. ... View more

Received a huge number of alerts from Traps regarding malware detection of the maximum system due to file “Wininfo.exe”.   Please find of a snapshot of one system and suggest how to fix this. Is there any impact? ... View more

received alert from Traps regarding malware detection of the maximum system due to file “Wininfo.exe”. Please find a snapshot of one system and suggest how to fix this. Is there any impact?     CORTEXXDR   WildFire Malware High Source:XDR Agent Category:Malware Action:Detected (Post Detected) Host:SS-akhil Username:N/A Starred:No Excluded:No Alert:1240 Incident:123 {     "original_alert_json":{         "uuid":"60950e6e927a42679814266964aa8edb",         "recordType":"threat",         "customerId":"1396903310",         "severity":3,         "generatedTime":"2021-08-13T09:14:58.439860Z",         "originalAgentTime":"2021-08-13T09:14:58.439860Z",         "serverTime":"2021-08-13T09:16:28.194296",         "isEndpoint":1,         "agentId":"8e6737354f7e37f0d7b25c330ebf0c7a",         "endPointHeader":{             "osVersion":"10.0.19043",             "agentIp":"192.168.0.101",             "deviceName":"SS-akhil",             "agentVersion":"5.0.6.5109",             "contentVersion":"193-67945",             "policyTag":"ZWMzNzFjZWEwZThlYjVkYzA5YjZlYWNhMDI0NjlkZTk0OTU2NzgyNTIzM2U2NWQ5ODhmZmM2OTBiNGY5NDk3MjpGYWxzZTpESVNBQkxFRDpMSUNFTlNFXzIwX1BSRVZFTlQ=",             "securityStatus":0,             "protectionStatus":0,             "deviceDomain":"ss.group",             "userName":"akhilheda",             "userDomain":"ss.group",             "userSid":"S-1-5-21-3286644759-2474778216-3316818064-3298",             "osType":1,             "is64":1,             "isVdi":0,             "agentId":"8e6737354f7e37f0d7b25c330ebf0c7a",             "agentTime":"2021-08-13T09:14:58.439860Z",             "tzOffset":0         },         "messageData":{             "eventCategory":"prevention",             "moduleId":"COMPONENT_WILDFIRE_POST_DETECTION",             "moduleStatusId":"CYSTATUS_MALICIOUS_EXE",             "preventionKey":"ee6af308fc1611ebbcfa98fa9b5d3ad5",             "processes":[             ],             "files":[                 {                     "rawFullPath":"\\\\?\\C:\\ProgramData\\Lenovo\\ImController\\SystemPluginData\\LenovoSystemUpdatePlugin\\session\\Repository\\r0zuj05w\\wininfo.exe",                     "fileName":"wininfo.exe",                     "sha256":"3ae8462769a4d5012b66af226a196bb12571c72a231b66f07afcc838e878045c",                     "fileSize":"82432"                 },                 {                     "rawFullPath":"\\\\?\\C:\\ProgramData\\Lenovo\\ImController\\SystemPluginData\\LenovoSystemUpdatePlugin\\session\\Repository\\r0zuj12w\\wininfo.exe",                     "fileName":"wininfo.exe",                     "sha256":"3ae8462769a4d5012b66af226a196bb12571c72a231b66f07afcc838e878045c",                     "fileSize":"82432"                 }             ],             "users":[             ],             "urls":[             ],             "postDetected":1,             "sockets":[             ],             "block":0,             "eventParameters":[                 "\\\\?\\C:\\ProgramData\\Lenovo\\ImController\\SystemPluginData\\LenovoSystemUpdatePlugin\\session\\Repository\\r0zuj12w\\wininfo.exe",                 "3ae8462769a4d5012b66af226a196bb12571c72a231b66f07afcc838e878045c",                 "3ae8462769a4d5012b66af226a196bb12571c72a231b66f07afcc838e878045c",                 "1"             ],             "fileIdx":0,             "verdict":1,             "preventionMode":"post_detected",             "trapsSeverity":3,             "profile":"Malware",             "description":"WildFire Malware",             "cystatusDescription":"Suspicious executable detected",             "sourceFile":{                 "rawFullPath":"\\\\?\\C:\\ProgramData\\Lenovo\\ImController\\SystemPluginData\\LenovoSystemUpdatePlugin\\session\\Repository\\r0zuj05w\\wininfo.exe",                 "fileName":"wininfo.exe",                 "sha256":"3ae8462769a4d5012b66af226a196bb12571c72a231b66f07afcc838e878045c",                 "fileSize":"82432"             },             "policyId":"3a2d7cfbae6c4ab39e8ffcd727140573"         }     },     "internal_id":1240,     "external_id":"ee6af308fc1611ebbcfa98fa9b5d3ad5",     "severity":"SEV_040_HIGH",     "matching_status":"MATCHED",     "detection_modules":null,     "end_match_attempt_ts":null,     "alert_source":"TRAPS",     "local_insert_ts":1628846247856,     "source_insert_ts":1628846157839,     "alert_name":"WildFire Malware",     "alert_category":"Malware",     "alert_description":"Suspicious executable detected",     "bioc_indicator":null,     "matching_service_rule_id":null,     "attempt_counter":0,     "bioc_category_enum_key":null,     "alert_action_status":"POST_DETECTED",     "case_id":123,     "is_whitelisted":false,     "starred":false,     "deduplicate_tokens":null,     "filter_rule_id":null,     "mitre_technique_id_and_name":[         ""     ],     "mitre_tactic_id_and_name":[         ""     ],     "agent_id":"8e6737354f7e37f0d7b25c330ebf0c7a",     "agent_version":"5.0.6.5109",     "agent_ip_addresses":[         "192.168.0.101"     ],     "agent_hostname":"SS-akhil",     "agent_device_domain":"ss.group",     "agent_fqdn":"SS-akhil.ss.group",     "agent_os_type":"AGENT_OS_WINDOWS",     "agent_os_sub_type":"10.0.19043",     "agent_data_collection_status":null,     "mac":null,     "agent_is_vdi":null,     "agent_install_type":"STANDARD",     "agent_host_boot_time":null,     "event_sub_type":null,     "module_id":[         "WildFire post detection"     ],     "module_name":[         "COMPONENT_WILDFIRE_POST_DETECTION"     ],     "association_strength":null,     "dst_association_strength":null,     "story_id":null,     "is_disintegrated":null,     "event_id":null,     "event_type":[         3     ],     "event_timestamp":[         1628846098439     ],     "actor_effective_username":[         "N\/A"     ],     "actor_process_instance_id":null,     "actor_process_image_path":null,     "actor_process_image_name":null,     "actor_process_command_line":null,     "actor_process_signature_status":[         "SIGNATURE_UNAVAILABLE"     ],     "actor_process_signature_vendor":null,     "actor_process_image_sha256":null,     "actor_process_image_md5":null,     "actor_process_causality_id":null,     "actor_causality_id":null,     "actor_process_os_pid":null,     "actor_thread_thread_id":null,     "actor_process_execution_time":null,     "causality_actor_process_image_name":null,     "causality_actor_process_command_line":null,     "causality_actor_process_image_path":null,     "causality_actor_process_instance_id":null,     "causality_actor_process_os_pid":null,     "causality_actor_process_signature_vendor":null,     "causality_actor_process_signature_status":[         "SIGNATURE_UNAVAILABLE"     ],     "causality_actor_causality_id":null,     "causality_actor_process_execution_time":null,     "causality_actor_process_image_md5":null,     "causality_actor_process_image_sha256":null,     "action_file_path":[         "\\\\?\\C:\\ProgramData\\Lenovo\\ImController\\SystemPluginData\\LenovoSystemUpdatePlugin\\session\\Repository\\r0zuj12w\\wininfo.exe"     ],     "action_file_name":[         "wininfo.exe"     ],     "action_file_md5":null,     "action_file_sha256":[         "3ae8462769a4d5012b66af226a196bb12571c72a231b66f07afcc838e878045c"     ],     "action_file_macro_sha256":null,     "action_registry_data":null,     "action_registry_key_name":null,     "action_registry_value_name":null,     "action_registry_full_key":null,     "action_local_ip":null,     "action_local_port":null,     "action_remote_ip":null,     "action_remote_port":null,     "action_external_hostname":null,     "action_country":[         "UNKNOWN"     ],     "action_process_instance_id":null,     "action_process_causality_id":null,     "action_process_image_name":null,     "action_process_image_sha256":null,     "action_process_image_command_line":null,     "action_process_signature_status":[         "SIGNATURE_UNAVAILABLE"     ],     "action_process_signature_vendor":null,     "action_process_image_path":null,     "action_process_image_md5":null,     "action_process_os_pid":null,     "os_actor_effective_username":null,     "os_actor_process_instance_id":null,     "os_actor_process_image_path":null,     "os_actor_process_image_name":null,     "os_actor_process_command_line":null,     "os_actor_process_signature_status":[         "SIGNATURE_UNAVAILABLE"     ],     "os_actor_process_signature_vendor":null,     "os_actor_process_image_md5":null,     "os_actor_process_image_sha256":null,     "os_actor_process_causality_id":null,     "os_actor_causality_id":null,     "os_actor_process_os_pid":null,     "os_actor_thread_thread_id":null,     "os_actor_process_execution_time":null,     "fw_app_id":null,     "fw_interface_from":null,     "fw_interface_to":null,     "fw_rule":null,     "fw_rule_id":null,     "fw_device_name":null,     "fw_serial_number":null,     "fw_url_domain":null,     "fw_email_subject":null,     "fw_email_sender":null,     "fw_email_recipient":null,     "fw_app_subcategory":null,     "fw_app_category":null,     "fw_app_technology":null,     "fw_vsys":null,     "fw_xff":null,     "fw_misc":null,     "fw_is_phishing":[         "NOT_AVAILABLE"     ],     "dst_agent_id":null,     "dst_causality_actor_process_execution_time":null,     "dns_query_name":null,     "dst_action_external_hostname":null,     "dst_action_country":null,     "dst_action_external_port":null,     "is_pcap":null,     "contains_featured_host":[         "NO"     ],     "contains_featured_user":[         "NO"     ],     "contains_featured_ip":[         "NO"     ],     "image_name":null,     "container_id":null,     "cluster_name":null,     "remote_cid":null,     "events_length":1,     "is_excluded":false }   ... View more

received alert from Traps regarding malware detection of the maximum system due to file “Wininfo.exe”. Please find a snapshot of one system and suggest how to fix this. Is there any impact?     CORTEXXDR   WildFire Malware High Source:XDR Agent Category:Malware Action:Detected (Post Detected) Host:SS-akhil Username:N/A Starred:No Excluded:No Alert:1240 Incident:123 {     "original_alert_json":{         "uuid":"60950e6e927a42679814266964aa8edb",         "recordType":"threat",         "customerId":"1396903310",         "severity":3,         "generatedTime":"2021-08-13T09:14:58.439860Z",         "originalAgentTime":"2021-08-13T09:14:58.439860Z",         "serverTime":"2021-08-13T09:16:28.194296",         "isEndpoint":1,         "agentId":"8e6737354f7e37f0d7b25c330ebf0c7a",         "endPointHeader":{             "osVersion":"10.0.19043",             "agentIp":"192.168.0.101",             "deviceName":"SS-akhil",             "agentVersion":"5.0.6.5109",             "contentVersion":"193-67945",             "policyTag":"ZWMzNzFjZWEwZThlYjVkYzA5YjZlYWNhMDI0NjlkZTk0OTU2NzgyNTIzM2U2NWQ5ODhmZmM2OTBiNGY5NDk3MjpGYWxzZTpESVNBQkxFRDpMSUNFTlNFXzIwX1BSRVZFTlQ=",             "securityStatus":0,             "protectionStatus":0,             "deviceDomain":"ss.group",             "userName":"akhilheda",             "userDomain":"ss.group",             "userSid":"S-1-5-21-3286644759-2474778216-3316818064-3298",             "osType":1,             "is64":1,             "isVdi":0,             "agentId":"8e6737354f7e37f0d7b25c330ebf0c7a",             "agentTime":"2021-08-13T09:14:58.439860Z",             "tzOffset":0         },         "messageData":{             "eventCategory":"prevention",             "moduleId":"COMPONENT_WILDFIRE_POST_DETECTION",             "moduleStatusId":"CYSTATUS_MALICIOUS_EXE",             "preventionKey":"ee6af308fc1611ebbcfa98fa9b5d3ad5",             "processes":[             ],             "files":[                 {                     "rawFullPath":"\\\\?\\C:\\ProgramData\\Lenovo\\ImController\\SystemPluginData\\LenovoSystemUpdatePlugin\\session\\Repository\\r0zuj05w\\wininfo.exe",                     "fileName":"wininfo.exe",                     "sha256":"3ae8462769a4d5012b66af226a196bb12571c72a231b66f07afcc838e878045c",                     "fileSize":"82432"                 },                 {                     "rawFullPath":"\\\\?\\C:\\ProgramData\\Lenovo\\ImController\\SystemPluginData\\LenovoSystemUpdatePlugin\\session\\Repository\\r0zuj12w\\wininfo.exe",                     "fileName":"wininfo.exe",                     "sha256":"3ae8462769a4d5012b66af226a196bb12571c72a231b66f07afcc838e878045c",                     "fileSize":"82432"                 }             ],             "users":[             ],             "urls":[             ],             "postDetected":1,             "sockets":[             ],             "block":0,             "eventParameters":[                 "\\\\?\\C:\\ProgramData\\Lenovo\\ImController\\SystemPluginData\\LenovoSystemUpdatePlugin\\session\\Repository\\r0zuj12w\\wininfo.exe",                 "3ae8462769a4d5012b66af226a196bb12571c72a231b66f07afcc838e878045c",                 "3ae8462769a4d5012b66af226a196bb12571c72a231b66f07afcc838e878045c",                 "1"             ],             "fileIdx":0,             "verdict":1,             "preventionMode":"post_detected",             "trapsSeverity":3,             "profile":"Malware",             "description":"WildFire Malware",             "cystatusDescription":"Suspicious executable detected",             "sourceFile":{                 "rawFullPath":"\\\\?\\C:\\ProgramData\\Lenovo\\ImController\\SystemPluginData\\LenovoSystemUpdatePlugin\\session\\Repository\\r0zuj05w\\wininfo.exe",                 "fileName":"wininfo.exe",                 "sha256":"3ae8462769a4d5012b66af226a196bb12571c72a231b66f07afcc838e878045c",                 "fileSize":"82432"             },             "policyId":"3a2d7cfbae6c4ab39e8ffcd727140573"         }     },     "internal_id":1240,     "external_id":"ee6af308fc1611ebbcfa98fa9b5d3ad5",     "severity":"SEV_040_HIGH",     "matching_status":"MATCHED",     "detection_modules":null,     "end_match_attempt_ts":null,     "alert_source":"TRAPS",     "local_insert_ts":1628846247856,     "source_insert_ts":1628846157839,     "alert_name":"WildFire Malware",     "alert_category":"Malware",     "alert_description":"Suspicious executable detected",     "bioc_indicator":null,     "matching_service_rule_id":null,     "attempt_counter":0,     "bioc_category_enum_key":null,     "alert_action_status":"POST_DETECTED",     "case_id":123,     "is_whitelisted":false,     "starred":false,     "deduplicate_tokens":null,     "filter_rule_id":null,     "mitre_technique_id_and_name":[         ""     ],     "mitre_tactic_id_and_name":[         ""     ],     "agent_id":"8e6737354f7e37f0d7b25c330ebf0c7a",     "agent_version":"5.0.6.5109",     "agent_ip_addresses":[         "192.168.0.101"     ],     "agent_hostname":"SS-akhil",     "agent_device_domain":"ss.group",     "agent_fqdn":"SS-akhil.ss.group",     "agent_os_type":"AGENT_OS_WINDOWS",     "agent_os_sub_type":"10.0.19043",     "agent_data_collection_status":null,     "mac":null,     "agent_is_vdi":null,     "agent_install_type":"STANDARD",     "agent_host_boot_time":null,     "event_sub_type":null,     "module_id":[         "WildFire post detection"     ],     "module_name":[         "COMPONENT_WILDFIRE_POST_DETECTION"     ],     "association_strength":null,     "dst_association_strength":null,     "story_id":null,     "is_disintegrated":null,     "event_id":null,     "event_type":[         3     ],     "event_timestamp":[         1628846098439     ],     "actor_effective_username":[         "N\/A"     ],     "actor_process_instance_id":null,     "actor_process_image_path":null,     "actor_process_image_name":null,     "actor_process_command_line":null,     "actor_process_signature_status":[         "SIGNATURE_UNAVAILABLE"     ],     "actor_process_signature_vendor":null,     "actor_process_image_sha256":null,     "actor_process_image_md5":null,     "actor_process_causality_id":null,     "actor_causality_id":null,     "actor_process_os_pid":null,     "actor_thread_thread_id":null,     "actor_process_execution_time":null,     "causality_actor_process_image_name":null,     "causality_actor_process_command_line":null,     "causality_actor_process_image_path":null,     "causality_actor_process_instance_id":null,     "causality_actor_process_os_pid":null,     "causality_actor_process_signature_vendor":null,     "causality_actor_process_signature_status":[         "SIGNATURE_UNAVAILABLE"     ],     "causality_actor_causality_id":null,     "causality_actor_process_execution_time":null,     "causality_actor_process_image_md5":null,     "causality_actor_process_image_sha256":null,     "action_file_path":[         "\\\\?\\C:\\ProgramData\\Lenovo\\ImController\\SystemPluginData\\LenovoSystemUpdatePlugin\\session\\Repository\\r0zuj12w\\wininfo.exe"     ],     "action_file_name":[         "wininfo.exe"     ],     "action_file_md5":null,     "action_file_sha256":[         "3ae8462769a4d5012b66af226a196bb12571c72a231b66f07afcc838e878045c"     ],     "action_file_macro_sha256":null,     "action_registry_data":null,     "action_registry_key_name":null,     "action_registry_value_name":null,     "action_registry_full_key":null,     "action_local_ip":null,     "action_local_port":null,     "action_remote_ip":null,     "action_remote_port":null,     "action_external_hostname":null,     "action_country":[         "UNKNOWN"     ],     "action_process_instance_id":null,     "action_process_causality_id":null,     "action_process_image_name":null,     "action_process_image_sha256":null,     "action_process_image_command_line":null,     "action_process_signature_status":[         "SIGNATURE_UNAVAILABLE"     ],     "action_process_signature_vendor":null,     "action_process_image_path":null,     "action_process_image_md5":null,     "action_process_os_pid":null,     "os_actor_effective_username":null,     "os_actor_process_instance_id":null,     "os_actor_process_image_path":null,     "os_actor_process_image_name":null,     "os_actor_process_command_line":null,     "os_actor_process_signature_status":[         "SIGNATURE_UNAVAILABLE"     ],     "os_actor_process_signature_vendor":null,     "os_actor_process_image_md5":null,     "os_actor_process_image_sha256":null,     "os_actor_process_causality_id":null,     "os_actor_causality_id":null,     "os_actor_process_os_pid":null,     "os_actor_thread_thread_id":null,     "os_actor_process_execution_time":null,     "fw_app_id":null,     "fw_interface_from":null,     "fw_interface_to":null,     "fw_rule":null,     "fw_rule_id":null,     "fw_device_name":null,     "fw_serial_number":null,     "fw_url_domain":null,     "fw_email_subject":null,     "fw_email_sender":null,     "fw_email_recipient":null,     "fw_app_subcategory":null,     "fw_app_category":null,     "fw_app_technology":null,     "fw_vsys":null,     "fw_xff":null,     "fw_misc":null,     "fw_is_phishing":[         "NOT_AVAILABLE"     ],     "dst_agent_id":null,     "dst_causality_actor_process_execution_time":null,     "dns_query_name":null,     "dst_action_external_hostname":null,     "dst_action_country":null,     "dst_action_external_port":null,     "is_pcap":null,     "contains_featured_host":[         "NO"     ],     "contains_featured_user":[         "NO"     ],     "contains_featured_ip":[         "NO"     ],     "image_name":null,     "container_id":null,     "cluster_name":null,     "remote_cid":null,     "events_length":1,     "is_excluded":false }   ... View more

Facing PPPoE session disconnection issue.  As per ISP, this is a Firewall issue as from Laptop or Computer (directly connected to ISP Router) no disconnection being observed. Palo Alto PA-3020   Following logs and capture packet are below  2021-07-15 11:27:25.969 +0400 debug: log_write(ppp/utils.c:678): No response to 5 echo-requests 2021-07-15 11:27:25.969 +0400 debug: log_write(ppp/utils.c:678): Serial link appears to be disconnected. 2021-07-15 11:27:25.969 +0400 debug: log_write(ppp/utils.c:678): ipcp: down 2021-07-15 11:27:25.969 +0400 debug: log_write(ppp/utils.c:678): [0x7f59d407cec0/17][1] PPP SENT: [LCP TermReq id=0x3 "Peer not responding"] 2021-07-15 11:27:25.969 +0400 debug: pan_pppoe_output(pan_pppoe_thread.c:1016): [0x7f59d407cec0/17][1] Sent 53 (45 on wire) bytes of PPPoE pkt to DP on socket 6 2021-07-15 11:27:29.969 +0400 debug: log_write(ppp/utils.c:678): [0x7f59d407cec0/17][1] PPP SENT: [LCP TermReq id=0x4 "Peer not responding"] 2021-07-15 11:27:29.969 +0400 debug: pan_pppoe_output(pan_pppoe_thread.c:1016): [0x7f59d407cec0/17][1] Sent 53 (45 on wire) bytes of PPPoE pkt to DP on socket 6 2021-07-15 11:27:33.968 +0400 debug: pan_pppoe_ok_to_send(pan_pppoe_fsm.c:352): [0x7f59d407cec0/17][1] Ok to send, ha_state:5 (fsm state is:4) for ethernet1/2 2021-07-15 11:27:33.968 +0400 debug: pan_pppoe_send_padt(pan_pppoe_fsm.c:931): [0x7f59d407cec0/17][1] Sending PADT on ethernet1/2 2021-07-15 11:27:33.968 +0400 debug: pan_pppoe_output(pan_pppoe_thread.c:1016): [0x7f59d407cec0/17][1] Sent 28 (20 on wire) bytes of PPPoE pkt to DP on socket 6 2021-07-15 11:27:33.968 +0400 debug: pan_pppoed_sysd_update_interface(pan_pppoed_sysd.c:439): Updating pppoe runtime info for interface ethernet1/2. 2021-07-15 11:18:35.138 +0400 Error: pan_ppp_fsm_run(pan_ppp_fsm.c:588): [0x7f59d407cec0/17][1] Unsupported protocol: 'IPv6 Control Protovol' (0x8057) received 2021-07-15 11:18:37.114 +0400 Error: pan_pppoe_fsm_run(pan_pppoe_fsm.c:1203): [0x7f59d407cec0/17][1] Drop PPPoE PADT pkt, sess_id received:4476 does not match pppoe_fsm sess id:0 2021-07-15 11:18:37.114 +0400 Error: pan_pppoe_fsm_run(pan_pppoe_fsm.c:1204): 2021-07-15 11:18:38.166 +0400 Error: pan_ppp_fsm_run(pan_ppp_fsm.c:588): [0x7f59d407cec0/17][1] Unsupported protocol: 'IPv6 Control Protovol' (0x8057) received 2021-07-15 11:19:22.119 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1322): [0x7f59d407cec0/17][1] Drop PPP Sess pkt, sess_id received:14663 does not match pppoe_fsm sess id:0 2021-07-15 11:19:22.119 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1323): 2021-07-15 11:19:25.117 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1322): [0x7f59d407cec0/17][1] Drop PPP Sess pkt, sess_id received:14663 does not match pppoe_fsm sess id:0 2021-07-15 11:19:25.117 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1323): 2021-07-15 11:19:28.117 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1322): [0x7f59d407cec0/17][1] Drop PPP Sess pkt, sess_id received:14663 does not match pppoe_fsm sess id:0 2021-07-15 11:19:28.117 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1323): 2021-07-15 11:19:29.215 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1322): [0x7f59d407cec0/17][1] Drop PPP Sess pkt, sess_id received:14663 does not match pppoe_fsm sess id:0 2021-07-15 11:19:29.215 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1323): 2021-07-15 11:19:31.117 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1322): [0x7f59d407cec0/17][1] Drop PPP Sess pkt, sess_id received:14663 does not match pppoe_fsm sess id:0 2021-07-15 11:19:31.117 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1323): 2021-07-15 11:19:37.118 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1322): [0x7f59d407cec0/17][1] Drop PPP Sess pkt, sess_id received:14663 does not match pppoe_fsm sess id:0 2021-07-15 11:19:37.118 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1323): 2021-07-15 11:19:40.117 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1322): [0x7f59d407cec0/17][1] Drop PPP Sess pkt, sess_id received:14663 does not match pppoe_fsm sess id:0 2021-07-15 11:19:40.117 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1323): 2021-07-15 11:19:41.215 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1322): [0x7f59d407cec0/17][1] Drop PPP Sess pkt, sess_id received:14663 does not match pppoe_fsm sess id:0 2021-07-15 11:19:41.215 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1323): 2021-07-15 11:19:43.117 +0400 Error: pan_pppoe_recv_pkt(pan_pppoe_fsm.c:1322): [0x7f59d407cec0/17][1] Drop PPP Sess pkt, sess_id received:14663 does not match pppoe_fsm sess id:0   noticed, the following messages on the system logs PPPoE session failed to connect for user:**bleep**@ABCDEF.Com on interface:ethernet1/2. Reason: No PPPoE Offer received PPPoE session failed to connect for user:NIP4@ABCDEF.Com on interface:ethernet1/2. Reason: Timeout, LCP down PPPoE session failed to connect for user:NIP4@ABCDEF.Com on interface:ethernet1/2. Reason: No PPPoE Confirm received PPPoE session failed to connect for user:NIP4@ABCDEF.Com on interface:ethernet1/2. Reason: Peer not responding, LCP down   On Packet Capture.. in package capture, I noticed that a PPP LCP sent a Termination request to the Palo alto interface. And other codes such as 0xa7 – PPPoE Active Discovery Terminate (PADT) that may be initiated from a server or client. And some Reject configuration& Protocol packet of PPP – IPCP / LCP   ... View more

An issue where I can’t view any configured IPSec Tunnels in GUI, From CLI, the IPSec tunnels appear normally.   Tried failover, restarting management service, even rebooting both Palo Alto units, using different browsers, different computers, and export; import and load the configuration file with no success.   Device Model: PA-5220 HA Mode Active-standby ... View more