This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About DanaHawkins
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About DanaHawkins
01-23-2023
15Posts
2Likes
2Solutions
Jan 23, 2023Last Visited
User
Activity
User
Profile
Latest posts by DanaHawkins
| Subject | Views | Posted |
|---|---|---|
| 335 | 11-29-2022 01:56 PM | |
| 393 | 11-29-2022 01:35 PM | |
| 815 | 09-29-2022 09:22 AM | |
| 1403 | 03-02-2022 07:41 AM | |
| 1200 | 03-01-2022 12:58 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 02-24-2022 11:25 AM | |
| 1 Like | 02-24-2022 11:38 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 03-25-2020 11:11 PM |
| Date Last Visited | 01-23-2023 06:02 PM |
| Posts | 15 |
| Total Likes Received | 2 |
11-29-2022
01:56 PM
@lychiang thanks for the reply. These firewalls are unmanaged/standalone. I have no problem importing the device or going through the process of creating the connector. It doesn't show up when I enable ML on any policies and try to run the ML discovery.
Unfortunately I don't have access to Expedition right now but I will try to provide a screenshot tomorrow via customer screenshare.
I've asked the customer to review logs coming from syslog to ensure they contain the serial number of the firewall in question.
... View more
11-29-2022
01:35 PM
Was this bug fixed?
I'm running into this with the latest version of the Expedition tool. I've imported the device via API (Username and Password). I've configured Expedition to be a syslog collector and that seems to be working properly with good log processing occurring. Whether I create a static or dynamic connector none show up when I go to analyze logs with ML. It does work with Enrichment.
We also deleted and recreated the project after performing an update.
... View more
09-29-2022
09:22 AM
I'm trying to import an AWS Palo Alto VM-Series firewall running 10.1.5-h2 into an ESXi Panorama VM running 10.1.6-h3. Communication between the firewall and panorama is good and there doesn't seem to be any routing issues.
I added the serial number into Panorama and generated the Auth-Key for the firewall but the firewall is showing up as "Disconnected". When I try to "Reassociate" the device I get an error that reads "Import Failed <serial number> to-sw-version is invalid"
I've searched Palo Alto KB and the Internet. I've found nothing related to this error.
Has anyone seen this one before? Or is there a system log that I can look at that might give some additional insight?
Your help would be greatly appreciated.
... View more
03-02-2022
07:41 AM
Yes and no. Remember GWLBs and TGWs serve specific purposes. If you just want VPC to VPC connectivity you can use VPC Peering. If you want to inspect traffic VPC to VPC using a pair of PAN FWs, you would use GWLB. If you want to perform dynamic routing with BGP over IPSec to on-prem with AZ redundancy, the TGW is still a good option. With the GWLB architecture, the firewall takes over the routing that would normally be done by the TGW (Hub and Spoke RT). That is because each GWLBe is mapped to an interface and zone on the FW and native routing is used. It's also much faster. In the old architecture, the Palo's had to have an IPSEC tunnel to the TGW which was limited to 1.25Gbps.
... View more
03-01-2022
12:58 PM
Best practice is to setup an inbound NAT on a port other than TCP/80 or TCP/443. For instance, use an inbound nat on port TCP/8888 that NATs to 443 with a destination of your back-end server. You can also check the reference architecture guide well. https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resources/guides/azure-architecture-guide
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
01-23-2023
06:02 PM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks