About SureshReddyM

Hi, can you share me route table output.   you can use below steps to get it. >network > virtual Routers><vr-name> >more runtime stats   And also try to test ( internet, security policy, ping etc) from below step.   device > Troubleshooting >     Best Regards, Suresh   ... View more

Hi,   As per logs I can recommend to open a TAC case and re verify about logs message even though it's resolved after reset of devices.   Sometimes but very rare brand new devixes also falty so you get  RMA after TAC will confirm.   Best Regards, Suresh           ... View more

Hi,   It's not about how many ports are using or not using. It's about security. How much security you are providing for your server or servers in DMZ  and your wan interfaces are entry for all your outside (untrust ) traffic enter point ie inbound traffic. There are couple chances that attackers can initiate DOS or DDOS /flooding mechanism like syn and ip etc and also there is chance that ip spoofing or Mac spoofing or any one of above will down your network interface and it's tough to troubleshoot when even you get an issue or traffic issue. And also think about redudnacy solution all wan and DMZ are dependent on same switch also loop hole in design.   That's a reason I recommend to use two different or staked redudnat switches towards both links.   Best Regards, Suresh   ... View more

Hi, It's always strongly recommended to use different layer 2/layer3 switches for WAN links and DMZ servers connectivity.     Best Regards, Suresh   ... View more

Hi Jim,   It might be the data in report taking the longer time or struck because of the huge info in the report.   And can you test whether the report provides the information you need by clicking the Run Now or not?   what is your custom report interval (daily, weekly, on a specific day of the week, or on a specific day of the month).?   can you modify the custom report parameters and try once.   Best Regards, Suresh       ... View more

Hi,   Can you try as per below KB.   https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaJCAS   try to clean temporary files and not imp files to spare disk usage.   Best Regards, Suresh   ... View more

Hi,   Tags are nothing but y ou can create colour-coded labels for use in various places within the firewall web configuration. These labels can be visual aids which help you more quickly locate information.   Tags can be leveraged to groups, filters or easily identified many other objects. Like security zones, policy rules, or address objects can be tagged up to 64 tags per object.   With the Tags defined, you can assign them to your security rules. You will assign the Allow tag to all rules which have an action of Allow. You will assign the Blocked tag to all rules which have an action of Deny.     To effectively utilizing tagging admin can make tagging mandatory by following steps. > Device            >Setup                     > management                        [policy rule base settings]       Best Regards, Suresh         ... View more

Hi, As per all other hardware models this PA220 is entry level so the bandwidth and other related values are minimal but there is no limitation of applied any feature on it.. and it won't support virtual systems like devide the firewall into logically multiple firewall. But it's support all security subscription licneses same like high end firewall and your soho environment it's more reailable solution for both lab setting purpose and using as a gateway.    --Suresh               ... View more

HI, The PA-220, PA-800, PA-3200 Series, and PA-5200 Series are next-generation hardware. App-ID firewall throughput   540 Mbps Threat prevention throughput    320 Mbps Connections per second    4,300 Max sessions (IPv4 or IPv6)    64,000   for more info, pls compare all series in below URL.   https://www.paloaltonetworks.com/products/product-selection#   PA-220 can you use it as a lab purpose and also for small SOHO setup as well.   For the only LAB practise I can recommend VM-50/100 also.   Best Regards, Suresh   ... View more

Hi, As per M-500 physical appliance specification  Processor  Intel Xeon 6-core CPU Memory/Internal Storage  128GB DDR4 RAM/240GB SSD storage Storage  Up to 24TB storage for logs; default is 4TB   So you can configure Panorama to function in one of several different modes: •A physical Panorama appliance (such as an M-500) can operate in: •Panorama mode – firewall management and log collection •Log Collector mode – dedicated log collector only •Management Only mode – firewall management only without log collection capabilities •The Panorama virtual appliance can function in one of four different modes: •Panorama mode – firewall management and log collection •Log Collector mode – dedicated log collector only •Management Only mode – firewall management only without log collection capabilities •Legacy mode The default mode for both virtual appliances and for M-Series appliances is Panorama mode. Legacy mode is a transitional option to help customers upgrade from older Panorama versions (such as version 7). The legacy mode does not support any of the logging and reporting enhancements made since Panorama 8.0. Legacy mode is available only when you have an existing Panorama 8.0 virtual appliance running in Legacy mode and you upgrade that device to 8.1. You can change a Panorama virtual appliance from Legacy mode to one of the other options; however, once you make the change you cannot revert the appliance to Legacy mode. On a fresh install of 8.1 and later versions, Legacy mode no longer is available. You can change Panorama from one mode to another if the following resource requirements are met: System Mode  Minimum Resource Requirements  Maximum Log Storage Capacity Panorama  16 CPUs, 32GB RAM  24TB Log Collector  16 CPUs, 32GB RAM  24TB Management Only  16 CPUs, 32GB RAM.   And many enterprises have moved to the public cloud to reduce cost and simplify the management efforts of their applications and services. With this move, enterprises can avoid the need to deploy an on-premises M-Series Panorama to manage their VM-Series firewalls in public cloud environments. Now you can deploy the entire Panorama solution on an M-Series appliance, in a public cloud, on a hypervisor such as ESXi, or a combination, depending on your requirements. A Panorama virtual appliance deployed in a public cloud offering can manage firewalls inside and outside the cloud. Likewise, a Panorama physical appliance can manage physical firewalls as well as virtual firewalls in public and private clouds     Best Regards, Suresh   ... View more

Hi,   Can you try as per below KB    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClffCAC   Regards, Suresh   ... View more

Hi,   Can you show me the outputs and screenshots of issue or error while deleting the zones?   By any chance is there any version or reachability issue.   Best Regards, Suresh   ... View more