This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About danoman2
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About danoman2
11-30-2022
36Posts
4Likes
0Solutions
Nov 30, 2022Last Visited
User
Activity
User
Profile
Latest posts by danoman2
| Subject | Views | Posted |
|---|---|---|
| 639 | 11-04-2022 11:56 AM | |
| 2265 | 09-02-2022 08:27 AM | |
| 2303 | 09-01-2022 11:52 AM | |
| 3053 | 09-01-2022 06:23 AM | |
| 1034 | 09-01-2022 05:55 AM | |
| 1137 | 09-01-2022 05:49 AM | |
| 3074 | 09-01-2022 04:18 AM | |
| 3297 | 08-31-2022 09:59 AM | |
| 1361 | 07-27-2022 05:21 AM | |
| 1495 | 07-19-2022 12:00 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 11-04-2022 11:56 AM | |
| 1 Like | 07-27-2022 05:21 AM | |
| 1 Like | 06-29-2022 12:17 PM | |
| 1 Like | 11-23-2021 07:52 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 2 Likes | |||
| 1 Like | |||
| 3 Likes |
User Badges
Community Statistics
| Member Since | 02-12-2020 05:39 PM |
| Date Last Visited | 11-30-2022 11:27 AM |
| Posts | 36 |
| Total Likes Received | 4 |
09-02-2022
08:27 AM
I did the 10.0.10 to 10.1.0 migration and my firewall sync got out of whack. The dlp plugin version became a mismatch. So I had to uninstall the 1.0.4 version on my active side 10.1.0 and then they were able to sync. The problem I'm encoutering now is when I failover to my passive device which is a match on all green checks on the HA stats, it drops traffic immedietly. Now after opening a ticket with a 3rd party TAC agency they advised moving passive device to 10.1.6h-6 and it is also dropping traffic to the outside. Hopefully they can help me out but I'm not holding my breath.
... View more
09-01-2022
11:52 AM
Thanks again @Adrian_Jensen . This explanation really brought it together for me.
Dan
... View more
09-01-2022
06:23 AM
@Adrian_Jensen I see you mentioned downloading 10.1 and 10.1.6-h6 but only installing 10.1.6-h6. Is there an article explaining that process? How does downloading but not installing a package have any affect on the package I end up installing?
... View more
09-01-2022
05:55 AM
Did you ever get a resolution on this?
... View more
09-01-2022
05:49 AM
I'm digging this one up as I'm now encountering the same issue I had the last time I did my PAN OS upgrade. After I suspend preemptive in the HA settings. I suspend the local device, the passive device becomes active. I install on newly passive device, I commit on the device Once the device reboots, I have an unsyncronized pair.
So, at this point I would like to copy the active running config from the active device to the passive device in an attempt to resync before continuing.
This is the command I'm running from the active device. I'm just confused on the language they use.
request high-availability sync-to-remote running-config Executing this command will overwrite the candidate configuration on the peer and trigger a commit on the peer. Do you want to continue? (y or n)
In this instance will the candidate configuration of the remote device, aka the passive device will be over written by the current running config of the Active device?
... View more
09-01-2022
04:18 AM
Thanks for the info. I read your post but I'm not following what you are referring to as the "new chain"? Then you refer to the new chain and upgrade as if they are the a seperate process. I've always followed the upgrade HA pair guide you posted and it has worked for me.
... View more
08-31-2022
09:59 AM
I see i'm on an unsupported version of PAN OS. I'd like to upgrade but I'm stumped on the upgrade path. 10.0 is EOL so it doesnt list a preferred release. Can I move to 10.1 immedietly? Also, 10.1 version lists 10.1.5 as the first version on the upgrade release guidance page, yet I can download 10.1 on my PA.
If either of the two options below are incorrect let me know the proper path. I do have an HA pair so I don't expect an outage based on past experience.
Also, thoughts on 10.2? I dont mind moving to a new version I just don't want anything breaking!
Do I step in this manner:
10.0.10 > 10.0.11-h1
10.0.11-h1 > 10.1.0
10.1.0 > 10.1.5
10.1.5 > 10.1.6-h6
Or like this:
10.0.10 > 10.1.5
10.1.5 > 10.1.6-h6
Please advise. Thanks.
NGFW
... View more
07-27-2022
05:21 AM
1 Kudo
I would open a case up if you are concerned it is not functioning correctly.
... View more
07-19-2022
12:00 PM
Perhaps its a failing LED. I see the right side looks a liitle yellowish. Maybe the color is just distorted. Can you power cycle the device? I see you have an HA pair, if its the inactive pair bounce it. If it is active, switch to passive and then reboot. Interested to see what it could be.
... View more
07-12-2022
10:42 AM
I made some progress on this. First off, I made a mistake on the portal config. I had it set to iOS only and have since switched to "any" OS. Upon the commit I can now log into the portal via the web address. Confirming my ability to authenticate with the portal via another method other than the iOS app. I then moved on to the windows applicaiton. It however is still giving me an error. Currently getting error "failed to get client configuration". Any thoughts?
... View more
06-29-2022
12:17 PM
1 Kudo
Jaime, Here is a good resource for all things global protect related. Resource List: GlobalProtect Configuring and Troubleshooting - Knowledge Base - Palo Alto Networks This is the guide I would follow for your use case. Found it in the cert section of the above link. I hope this helps. How to Generate a CSR (Certificate Signing Request) & Import th... - Knowledge Base - Palo Alto Networks
... View more
06-29-2022
07:39 AM
It's telling you that that keys do not match. What cert types do you have the option of downloading from your CA? Try to get a cert that contains all of the cert files including the key. You may have to do some evaluation of the cert with OPENSSL to determine why the key is a mismatch. Your CA could potentially help with that as well.
... View more
06-28-2022
07:59 AM
I've recently setup and succesfully tested a new portal and gateway with Azure AD MFA and the global protect app. Currently i can log into my iphone app and I receive the portal auth, (LDAP) and then get prompted for the Microsoft sign in followed by the MFA (SAML), in my case I'm utilizing the MS authenticator app. All is good with this setup and configuration. The problem I'm seeing now is I cannot authenticate with the portal address via the Web using the url for the portal or from the global protect app on my windows laptop. Testing took place with the Global Protect iOS app. GP logs are not showing me enough to break down what is occuring, AUTH failed, portal config is null, portal status is user authentication failed. Monitor shows failed login, with "other" for auth method. Let me know what you would like to see from my logs to troubleshoot. I'm not seeing why this isnt working. Perhaps some conditional access settings on the MS side. GlobalProtect
... View more
06-28-2022
07:18 AM
You'll know if it is valid or not when you upload to the firewall. You should get green checks if the cert is validated on the firewall. From there you can deploy it in the global protect client.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-30-2022
11:27 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks