About ppatel

Replication was performed in-house on 4.1.x. Following was the custom system log format in the email server profile :- 1) With white spaces syntax:- $domain \n$id \n$actionflags \n$severity \n$time_generated \n$object \n$severity 2) Without white spaces syntax:- $domain\n$id\n$actionflags\n$severity\n$time_generated\n$object\n$severity 3) $domain $id $actionflags $severity $time_generated $object $severity Email Alert Logs that appear in my email-address Alert 1:- 1 \n0 \n0x0 \ninformational \n2012/07/27 20:48:00 \n \ninformational Alert 2:- 1 \n0 \n0x0 \ninformational \n2012/07/27 20:50:58 \n \ninformational A similar issue has been filed as a bug to engineering and the targeted release is 5.0. This issue might not be resolved in 4.1.x branch Let me know if this is helpful. Regards Parth ... View more

Hi Ian, I guess, you should go through this detailed step by step documentation of the GlobalProtect configuration for users upgrading from Net-Connect. It also covers the necessary migration steps and tips for customers using NetConnect remote access solution upgrading to PAN-OS 4.1. Upgrading the software version will also migrate SSL VPN configuration into Global protect configuration for PAN Os 4.1. Global protect should work with PAN-OS 4.0 but you can use netconnect till the OS is not upgraded. Once upgraded to Global protect when the users go to the portal and download the client they would be asked for an option to uninstall netconnect from your machine. Also the following link will help install GP client via AD GPO https://live.paloaltonetworks.com/docs/DOC-1737 FYI, go through the following technote:- Regards ... View more

Darren, Is the Ip-pools assigned to the Global protect gateway overlapping the Local LAN? If that is the case, It is recommended to have ip-pool as a completely different subnet that the Local LAN -trust network. Regards ... View more

Hello, I think the disk check is no longer running.I have attached the Sample output from a 4000 series firewall below but it might differ based on platforms: Diagnostics" and ran the "Test Disk Performance with Bonnie++" selection you suggested. Here's the output ... =================================================== Testing.... Using uid:0, gid:0. Writing with putc()...done Writing intelligently...done Rewriting...done Reading with getc()...done Reading intelligently...done start 'em...done...done...done... Create files in sequential order...done. Stat files in sequential order...done. Delete files in sequential order...done. Create files in random order....Using uid:0, gid:0. Writing with putc().............................................................done. Writing intelligently......................done Rewriting........................................done Reading with getc()...........................................................done Reading intelligently...................done...........................Bonnie output: Version 1.03d------Sequential Output------ --Sequential Input- --Random- -Per Chr- --Block-- -Rewrite- -Per Chr- --Block-- --Seeks-- MachineSize K/sec %CP K/sec %CP K/sec %CP K/sec %CP K/sec %CP /sec %CP Thor 2G 32269 99 99629 43 48146 15 33579 96 118085 16 268.7 1 ------Sequential Create------ --------Random Create-------- -Create-- --Read--- -Delete-- -Create-- --Read--- -Delete-- files /sec %CP /sec %CP /sec %CP /sec %CP /sec %CP /sec %CP 16 +++++ +++ +++++ +++ +++++ +++ +++++ +++ +++++ +++ +++++ +++ Thor,2G,32269,99,99629,43,48146,15,33579,96,118085,16,268.7,1,16,+++++,+++,+++++,+++,+++++,+++,+++++,+++,+++++,+++,+++++,+++ done. Stat files in random order...done. Delete files in random order...done. Try to exit out by pressing Ctrl+C or Esc. In addition to that I would also recommend you perform FSCK disk check from the maintenance mode. Once the FSCK disk check is done, reboot the device and examine the reboot sequence and look for emask/ata errors. You also see that in system logs of the firewall sometimes:- 19:00:56 10.3.66.2 10.3.66.2 1,2010/05/04 19:00:56,0002C111111,SYSTEM,general,0,2010/05/04 19:00:56,,general,,0,0,general,critical,ata2.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x6 frozen If you see this, it possible means you have corrupt hard drive. Let me know if this helps. Regards Parth ... View more

Hi Tomoyuki, That is true. Panorama does not have a show arp command because there is no physical interface. In order to see the arp information of individual devices we would have to log into each device.It is a server hosted on a VM to manage the devices. Hence it is not possible to read the arp table on Panorama Let me know if this helps. Regards ... View more

The fix to HA sync will be introduced in software version 4.1.9 . However 4.1.8 hotfix is now available. So please open a support ticket with Palo Alto Networks and once verified, it would be made available to you. 4.1.8-hotfix should take care of  HA A/P, A/A, and Panorama HA. For more details look up this document:- https://live.paloaltonetworks.com/docs/DOC-3890 Regards Parth ... View more

At this time only the logs can be exported out in CSV format. Scheduled export of logs can also be done. Select the log type from the drop down list. The reporting is done in PDF formats only. Regards Parth ... View more