Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
02-19-2020
61Posts
3Likes
1Solution
Feb 19, 2020Last Visited
User
Activity
User
Profile
Latest posts by alle
| Subject | Views | Posted |
|---|---|---|
| 754 | 09-27-2017 06:09 AM | |
| 1148 | 02-21-2017 07:07 AM | |
| 962 | 11-02-2016 02:25 AM | |
| 980 | 10-26-2016 09:57 AM | |
| 808 | 07-13-2016 04:32 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 02-10-2011 05:26 AM | |
| 1 | 11-21-2014 05:12 AM | |
| 1 | 10-08-2012 01:15 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 |
User Badges
Public Statistics
| Date Registered | 11-16-2009 02:02 AM |
| Date Last Visited | 02-19-2020 10:08 AM |
| Total Messages Posted | 61 |
| Total Likes Received | 3 |
09-27-2017
06:09 AM
hello , the identification is enable on your zones ? DEvice>network>zone> check the box "enable identification" in zone parameters
... View more
02-21-2017
07:07 AM
hello, I ve seen with PANOS 7.1 user id enhancement that Redistribution agents can receive IP/user mappings from all available sources of User-ID information, including Windows UID agents. and that used LDAP proxy is a workaround to redistribution of LDAP Group . SO I think that you can use an windows uid agent as proxy LDAP. and redistribute this information with the collector https://live.paloaltonetworks.com/t5/PAN-OS-7-1-Articles/PAN-OS-7-1-User-ID-enhancements/ta-p/74609 reagards,
... View more
11-02-2016
02:25 AM
hi, I ve allocate 50gb for the storage. But they are not information in the panorama configuration file for the storage.
... View more
10-26-2016
09:57 AM
hello Has anyone gone through the process of moving configuration from an M100 to a VM. I can import and load the file configuration, but when I try to commit I have the following error : deviceconfig -> setting -> management is missing 'storage-partition' when I force management setting in internal , I ve the following error: configured traffic quota of 0 MB is less than the minimum 32 MB. Invalid configuration. Please fix errors and try again. but I can't change the quota because I can see that I've 0MB of disk space when I try to see the VM log partition I've the following message show system disk-space Server error : failed to execute command show system disk-partition Server error : failed to execute command Any IDEA? thks
... View more
- Tags:
- panorama
07-13-2016
04:32 AM
Hi, when I try to load a snapshot config from a PA4020 on an another PA4020 with the same version I have the following error result unexpected here. Discarding. certsandkeys unexpected here. Discarding. custom-logo unexpected here. Discarding. I have tried to delete the custom-logo in the xml files without success Any Idea?
... View more
03-09-2015
07:18 AM
Hello world, I must change a cluster PA2050 by PA5020 (with the same configuration) and this PA are Managed by Panorama. ( all policies objects are created on Panorama but not policies) Somebody know how to make this change? which steps? thanks for your help Regards
... View more
Labels:
- Labels:
-
Configuration
-
Panorama
-
Set Up
11-21-2014
05:27 AM
Hi , I confirm that the protocol used is sip. So your information is very interesting. I ll try to do this change on the PALO ALTO next week. and inform you about it thks for your answer.
... View more
11-21-2014
05:12 AM
1 Kudo
thks for your answerPANOS but when I do an application OVERRIDE ALG is not used no?
... View more
11-21-2014
05:04 AM
Hello world, I've the following problem after move a VOIP DMZ on PALO ALTO 2050 5.0.11: If I dial in from outside, then the answer is almost immediate, so that is fine, but when I call out the line is dead for 35-40 seconds before a ringing tone is heard I don't uderstand this delay? I try to do an application override but the issue stay. I can't see any drop on the firewall. Somebody know this problem? thks
... View more
Labels:
- Labels:
-
Configuration
-
Networking
-
Troubleshooting
02-03-2014
05:27 AM
hello, so I can read " Inter-vsys traffic, also known as ‘shared-vsys’, allows the administrator to define systems where flows can traverse two vsys’s without the need to leave the firewall when being routed between the vsys’." I don't know if sgnificate that the flow can't traverse more than 2 VSYS?
... View more
02-03-2014
03:32 AM
Hello , I need to route users between more than 2 VSYS. do you know if it's possible to route packet between more than 2 VSYS. PACKET IN-> VSYS1 -> VSYS2->VSYS3-> out. What is the limitation for the routing inter VSYS thks for your help! ALex
... View more
Labels:
- Labels:
-
Configuration
-
Networking
-
Set Up
06-12-2013
05:50 AM
thanks emr for your response. I thinks that's exactly my problem.
... View more
06-12-2013
01:52 AM
Hello world, I have done an upgrade of PA2050 cluster in 4.0.9 to 4.1.12. In 4.0.9 the link speed and duplex for HA PORT was forced. after the uprade in 4.1.12 I lost a lot of packet and when I tried to do a commit I had an error message. Commit failed because the HA PORT LINK IS NOT AUTO. I have changed the link port to auto and the issue was fixed. I haven't see any information about this configuration do you know if this is a bug or a next pre-requisites thks, ALEX
... View more
Labels:
- Labels:
-
Configuration
-
Networking
-
Set Up
04-15-2013
05:37 AM
the problem is solve with a modification of ospf priority. the problem was there are two DR in the same area thx
... View more
04-15-2013
05:20 AM
Hello, I have configured ospf in ha with PA4060 in V4.1.11 I can see my neighbor but my palo-alto with low priority stay DR and I can see the following error in log: PA-4060-1(active)> tail follow yes mp-log routed.log i/f idx 0 Hello packet dropped because source router ID matches local router ID. any Idea for my problem thx, ALex
... View more
- Tags:
- ospf
Labels:
- Labels:
-
Configuration
-
Troubleshooting
10-09-2012
01:41 AM
hello, Someone know how to works the feature COLLECTORE NAME on PAN5.0? thks, Alex
... View more
Labels:
- Labels:
-
Configuration
-
User-ID
10-05-2012
10:18 AM
HELLO, I ve seen that is not possible to edit panorama rules on managed device. So if you want modify a panorama rules you must use PANORAMA. SO My question is : it is possible to delete panorama rules from device ? cli? specific configuration? or use PANORAMA IS MANDATORY TO DELETE PANORAMA RULES? thks for your help regards, ALex
... View more
- Tags:
- panorama
Labels:
- Labels:
-
Management
-
Panorama
09-24-2012
06:33 AM
thks for your reponse but when I use the "validate Candidate" the shadows rules is not show ! I can see my shadow rules only if I use commit
... View more
09-24-2012
06:18 AM
Hello, do you know if it's possible to check shadow rules without do a commit. like a commit check? or show shadow rules? thks, Alex
... View more
Labels:
- Labels:
-
Management
-
Troubleshooting
08-09-2012
03:37 AM
Hello, I've configured on PA5060 an Idenfication with AD: PA5060: 4.1.6 USER ID AGENT : 4.1.4-3 LDAP SERVER 389 I do a group mapping by group but this group have more than 16000 users. when I do a show user usersIDS , I can't see all my users. I know that AD have a limitation of page size to 1000 users by request. do you know if they are an limitation for the numbers of users in a group when you use PA ??? do you have a workaround for this problem??? thanks,
... View more
Labels:
- Labels:
-
Configuration
-
User-ID
06-20-2012
07:32 AM
Hello, I have installed a panorama with extended disk of 1TB and now I want just use 500 GB. I can reduce the size of my virtual disk without reinstall the system?? thks for your help!
... View more
Labels:
- Labels:
-
Management
-
Panorama
05-10-2012
07:39 AM
SO FOR CLOSE THE DISCUSSION : IS NOT POSSIBLE TO USE PAN-AGENT WITH MULTI-FOREST ( PAlo-alto confirmation)
... View more
05-10-2012
07:32 AM
In this case it's true you can't use this solution, you must keep one agent per domain. But with this configuration it's not possible to create policy with a GROUP which contain EUROPE and AMERICA'S USERS. you must autorized a group of EUROPE and a group of AMERICA. BUT I'VE A GOOD HOPE IN THE NEW VERSION 5.0
... View more
05-10-2012
07:07 AM
essnet, you can do the same thing on EUROPE with the modification of xml file USER AGENT ip-mapping -> FIREWALL IP-MAPPING EUROPE/NICO 192.168.1.2 MYCOMPANY/NICO 192.168.1.2 And for your group you must use Universal GROUP! but it's true that you can just use the domain of your enumeration ( MYCOMPANY) Alex
... View more
05-10-2012
03:20 AM
Hi essnet, it is possible to use mutlidomain in the same forest with the global catalogue. you must just modify the xml configurationof your user-id agent. You can modify in the xml file the name of domain to send at the firewall so even if you do a ip-mapping in the America domain you can send to the firewall my company. USER AGENT ip-mapping -> FIREWALL IP-MAPPING AMERICA/JOHN 192.168.1.2 MYCOMPANY/JOHN 192.168.1.2 regards,
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
