Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About jay.martin
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About jay.martin
09-20-2020
21Posts
1Like
2Solutions
Sep 20, 2020Last Visited
User
Activity
User
Profile
Latest posts by jay.martin
| Subject | Views | Posted |
|---|---|---|
| 672 | 05-06-2014 10:14 AM | |
| 672 | 04-03-2014 09:55 AM | |
| 1565 | 03-19-2013 03:31 PM | |
| 1565 | 03-19-2013 12:16 PM | |
| 1565 | 03-19-2013 11:59 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 11-28-2012 07:23 AM |
User Badges
Community Statistics
| Member Since | 05-24-2011 05:34 AM |
| Date Last Visited | 09-20-2020 07:41 AM |
| Posts | 21 |
| Total Likes Received | 1 |
05-06-2014
10:14 AM
This article may also prove helpful - https://live.paloaltonetworks.com/docs/DOC-6948
... View more
04-03-2014
09:55 AM
Hi - I'm assuming you are not using GlobalProtect agents - if you were you could create a HIP object for the XP OS and target your rule that way. Without GP, if your DNS performs well you could create an address group and put the FQDN's of the XP machines in, then do a deny rule to the Internet. Or more preferably to take potentially slow/inaccurate DNS resolution out of the picture, if the XP machines have static IP addresses, or effectively static by DHCP reservation, you could do the same using the IP addresses instead of the FQDN's. Hope this gives you some possible options.
... View more
03-19-2013
03:31 PM
Support told me it affects all releases using BrightCloud (that's gotta be a lot of their customers!).
... View more
03-19-2013
12:16 PM
Thanks - I just opened a case as well - we have around 70 firewalls, and most, if not all look to have this issue. Kinda hard to manually clear cache very quickly on 70 firewalls. I sure hope they know what's going on and how to stop it!!!
... View more
03-19-2013
11:59 AM
Grrrr!!! - I wondered why our decryption was not working (it's based on URL category)! Same issue here - 5.0.3 on 4060 - cleared cache and that resolved. Did you open a case? Interestingly (not sure if coincidence or not) our 4060's dataplane restarted this morning, within 30 seconds of the updated BrightCloud DB being installed (url-filtering-version: 4058). I am seeing lots of "unknown" category being logged across our other platforms as well.
... View more
03-12-2013
05:03 AM
I agree so far (pretty early still to for me to call 5.0.3 all good, but...) it has useridd back to what I would call "normal" in terms of cpu utilization - I've put 5.0.3 on both 2000 and 4000 platforms with similar (good) results - let's just hope 5.0.3 doesn't introduce some new nasties!!!
... View more
02-05-2013
09:06 AM
Same here - 2020's and 2050's as well as 4060's - had to take 2000's back to 5.0.1 as commits and FQDN refreshes started failing. 4060's still running 5.0.2, but userid consuming LOTS of cpu constantly, but I suppose the beefier platform is handling it. Already reported to PAN but yet to hear back on how they intend to fix.
... View more
11-28-2012
07:23 AM
1 Kudo
I brought it to our SE who is making a case for this - he told me others have requested same. One of the primary reasons they gave for having that way is for compulsory vpn connections to be able to still talk to captive portals in hotels, airports, etc. I said, if that's the case, why not only allow the apps necessary to do captive portals and not wide open. Fingers crossed they'll make it at least a configurable option for their customers...
... View more
10-18-2012
11:55 AM
Thanks for the reply - I agree - we must be able to cut the GP client off their LAN! I'm also surprised there would be no permanent solution for this yet!
... View more
10-18-2012
07:53 AM
Hi rgreenspon - we have same exact issue/concern with both windows and mac clients - running latest 1.1.7 gp client - did you get a permanent solution?
... View more
03-07-2012
12:40 PM
bpappas - Please excuse me if I'm wrong, and David certainly correct me if I am, but I think David is asking how to guarantee bandwidth for his IPSec tunnel, not necessarily the traffic that flows over that tunnel. Reason I say I think that's what he's after, is that is exactly what I'm after as well. I want to be able to set QoS such that the IPSec tunnel will always have enough bandwidth to stay up, as we've seen circuits get so saturated that the entire tunnel will drop. At least that's how I read David's question. If I am wrong, please respond to my question as well. Thanks - Jay
... View more
01-26-2012
07:16 PM
Any way to find out what caused unplanned reboot of a PA firewall, such as a power outage at a remote site? Thx
... View more
Labels:
- Labels:
-
Troubleshooting
01-20-2012
06:48 AM
We've seen same thing you're describing on our 2050 running 4.1.1 - hoping 4.1.2 clears these things up!!!!! 10-15 minute commits are rediculous!!!
... View more
12-16-2011
08:52 AM
I get same - one int tagged for netflow, but 5 or 6 ints show up in ManageEngine Netflow - we're running 4.1.1, and same issue on several PAs (2020, 2050).
... View more
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
