This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Jimmy20
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Jimmy20
04-27-2022
18Posts
1Like
0Solutions
Apr 27, 2022Last Visited
User
Activity
User
Profile
Latest posts by Jimmy20
| Subject | Views | Posted |
|---|---|---|
| 1376 | 11-25-2021 09:14 AM | |
| 2250 | 10-15-2020 05:20 AM | |
| 2279 | 10-15-2020 04:29 AM | |
| 1933 | 09-30-2020 07:06 AM | |
| 1604 | 09-25-2020 10:32 PM | |
| 2832 | 09-25-2020 05:41 AM | |
| 3157 | 09-22-2020 10:07 AM | |
| 3192 | 09-22-2020 04:08 AM | |
| 3343 | 09-20-2020 11:03 PM | |
| 2358 | 09-14-2020 06:50 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 09-04-2020 06:38 AM |
User Badges
Community Statistics
| Member Since | 06-05-2020 12:41 AM |
| Date Last Visited | 04-27-2022 02:07 AM |
| Posts | 18 |
| Total Likes Received | 1 |
11-25-2021
09:14 AM
Hi All, I am stucked with very basic requirement on Palo-alto firewall. Would like to know how to check the traffic statistics on PA Interfaces as requirement is to check the current live traffic on specific Interface. Followed some articles available on Internet. But none of them are correct or useful. They referring to Network -> QoS for checking the Interface statistics after adding them. But the outcome shown is not correct or close to reality (showing on Egress). Also tried to explore widget options in ACC tab. But no luck there as well. Can anyone suggest the way (both GUI and CLI) to check the real time traffic flow on PA Interface.
... View more
10-15-2020
05:20 AM
Hi SutareMayur Yeah, have bit clue about this. But still....If don mind could u pl share configuration steps.
... View more
10-15-2020
04:29 AM
Hi All, I have a bit confusion about Wildcard based(*.) policy on PA firewall. If we have to apply policy for *.mysitexyz.com as destination for port 443, will there be any additional configuration require to achieve this or have to follow traditional approach like : Object --> Addresses --> Add --> Select Type 'FQDN' --> mentioned - *.mysitexyz.com --> Ok and call this FQDN under policy. Or there is some other way to treat *. based wildcard in PA. Rgds Jimmy
... View more
09-30-2020
07:06 AM
Hi, Can anyone suggest, if we failover from Active to Passive unit on PA firewall. will this maintains the established sessions by default. Or we have to additionally enable some other setting to make this enable (should maintain session during cluster failover). Additionally, one more observation while we did recent failover....We have 09 IPSec tunnels created on PA (phase-1 and phase-2 both active) . - When we did failover from active to passive (and passive unit became the new active). - We observed that approx 5-6 IPSec tunnels (phase-1 and phase-2 both) were active on new active unit. - However rest 3-4 IPSec tunnels are showing Phase-2 down (but phase-1 active) on new Active but showing active (both phase-1 and phase-2) on new passive units. Rgds
... View more
09-25-2020
10:32 PM
Hi All, Referring my prior discussion Subject - "Firmware Updation A-P" , We have below configuration enabled on Link & path monitoring configuration at this moment, have a look on screen shot. Will this be sufficient to trigger auto failover to Passive , if in case we can disconnect / disabled any of the directly connected interface from Active firewall Unit. Thought to ask here to avoid any understanding gap.
... View more
09-25-2020
05:41 AM
Hi Mayur, Just captured a screen shot for Link & path monitoring configuration when we have enabled this time. Will this be sufficient to trigger failover to passive , if in case we have disconnect / disabled any of the directly connected interface from Active firewall Unit. Thought to ask here to avoid any understanding gap.
... View more
09-22-2020
10:07 AM
Thanks Mayur..! How much time usually firmware activity takes to complete (active and passive both). I was checking something today related to "Link and Path monitoring" which is for another activity of failover testing only. Plan is to disconnect or disable the cable/ Interface from switch end ( any of the connected Interface on PA firewall) This is just to avoid any changes directly on firewall (Eg: Suspend local device) else that would be sort of manual failover. For now on our firewall Link Group is enabled with "ANY" and Path Monitoring is also enabled with "ANY". except this nothing has been available under Link group (I mean about Interfaces). Would like to know, if both the mentioned options which are Enabled with ANY ...will solve our purpose or will something additional also need to configure. Rgds
... View more
09-22-2020
04:08 AM
Hi Mayur, So You are recommending to start firmware upgrade first from Primary(Active) unit despite start from Secondary. Confirming as most of the available docs suggesting to start from secondary unit. And how much time the whole activity will take to complete. Rgds
... View more
09-20-2020
11:03 PM
Hi Guys, We have to upgrade firmware of our PA FWs in Active-passive Cluster (It's first time). Referred some online available documents to get familiar with upgradation process but all of them have difference at certain steps (I mean they are not unique). requesting if anyone can share the easy and effective straight forward steps (preferably through GUI). Usually what is the downtime expected for business critical applications during firmware updating process on Act-Pas setup. Rgds Jimmy
... View more
09-14-2020
06:50 AM
Hi Steve, Thanks for Quick and instant responses. Well, We need to check with client what they are actually intending. if they are OK with system logs then we are almost done as you rightly said with "Log setting" options. But if they want Threat and other related logs to be available on Syslog then have to go for "LFP" option. One more point at this moment : Where do we get option to set log levels ( Critial , High, informational, Low, Medium) under Log Forwarding profile option. I can't find these anywhere there...
... View more
09-14-2020
06:22 AM
Hi Steve, What if we configure, as found some more ways probably (except Log Forwarding Profile) 1- Configure Syslog Server Profile 2- Device - Log Setting - System -> call Syslog Server created in profile -> Filter logs as per levels Critial , High, informational, Low, Medium. Once configure, commit. Is'nt also the correct way ..?
... View more
09-14-2020
05:16 AM
Hi Guys We have PA with version 9.0.4 and have to configure Syslog server log forwarding on the same. Created (syslog) server profile..Now creating "Log Forwarding Profile" there are options "forward method" and "built-in-action" available there. which is not giving so much clarity what need to be configure there, Referred few articles available on Internet but no-one giving much clarity for the configuration side. Requesting suggestion for further configuration.
... View more
09-08-2020
09:57 AM
Hi team, Can someone share his opinion here. Is BGP peering fluctuation on IPSec tunnels are normal.
... View more
- Tags:
- peering
09-07-2020
08:03 AM
Hi All, We are running PA with firmware 9.0.4 Getting errors while "disabling" not required/unsed IPSec tunnel. Error: tunnel interface tunnel.50 encap interface is not set. Error: parse tunnel member failed. Error: error parse qos tunnel group Error: error parse tunnel-traffic group list Error: alloc obj iterator failed Error: QoS configuration error. (Module: device) Commit Failed. however one more tunnel (eg: tunnel.60)we can successfully disabled. - IKE gateway of both tunnels (tun.50 and tun.60) are diferent. - Both tunnels sharing share IPSec crypto & IKE crypto. please help for reason and solution.
... View more
09-04-2020
08:51 AM
Hi SutareMayur, Thanks for reply, What you replied is known to me. But i was searching for - '"Can we consider communication between source and dest if session end reason is TCP-RST-FROM-CLIENT or TCS-RST-FROM-SERVER , bçoz as i mentioned in initial post i can see TCP-RST-FROM-CLIENT for a succesful transaction even, However it shuld be '"tcp-fin" or something except TCP-RST-FROM-CLIENT. if it is reseted by client or server why it is considered as sucessfull.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
04-27-2022
02:07 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks