Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About ammar
About ammar
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
11-01-2020
22Posts
5Likes
0Solutions
Nov 01, 2020Last Visited
User
Activity
User
Profile
Latest posts by ammar
| Subject | Views | Posted |
|---|---|---|
| 438 | 12-14-2019 10:03 PM | |
| 575 | 12-12-2019 01:02 AM | |
| 1202 | 08-25-2019 08:11 AM | |
| 1391 | 07-25-2019 06:38 AM | |
| 2901 | 07-25-2019 05:44 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 05-11-2017 11:12 AM | |
| 1 | 05-12-2017 07:49 AM | |
| 2 | 05-12-2017 02:40 AM | |
| 1 | 05-11-2017 05:25 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 02-11-2015 11:06 PM |
| Date Last Visited | 11-01-2020 09:59 AM |
| Total Messages Posted | 23 |
| Total Likes Received | 5 |
12-14-2019
10:03 PM
Why NAT is required to receive Multicast stream ?
... View more
08-25-2019
09:05 AM
I would encourage you to review our reference architecture. It covers east-west flows that is the cloud reclassification of a DMZ. As designs scale, we move Azure toward transit VNET designs. https://www.paloaltonetworks.com/resources/guides/azure-architecture-guide In addition, your SE can engage with you in a design session around cloud architectures as they typically differ from traditional DC designs due to the lack of L2 in the cloud.
... View more
07-25-2019
07:48 AM
@ammar ,
If you are experiencing the bug for which h5 was created then it's recommended to install the hotfix.
If you don't suffer from this bug then it's recommended to stay on 8.1.8
Cheers,
-Kiwi.
... View more
10-15-2017
06:21 PM
Hi Ammar, Probably these two links might help with your query. https://www.paloaltonetworks.com/documentation/70/pan-os/newfeaturesguide/authentication-features/suite-b-cryptography-support https://live.paloaltonetworks.com/t5/Management-Articles/Is-IKEv2-Supported-on-the-Palo-Alto-Networks-Device/ta-p/61537
... View more
07-10-2017
07:23 AM
ofcourse!
nat (all) policies are processed top to bottom and the rule that is hit first will apply
so if you set a policy first with the specific source IP addresses in the 'original packet', you can change the NAT translation for those sources, then set the 'any' policy below that for everyone else
... View more
05-12-2017
02:38 PM
Correct. Ping simply could be disabled on the ASA external interface. Please provide more logs from the responder side (in our case it is Palo) and then we can go from there.
... View more
05-12-2017
07:55 AM
Hi @ammar
My example also returned a timeout in IKE-Ph1 :
IKE phase-1 SA is deleted SA: X.X.X.X[500]-X.X.X.X[500] cookie:54ec63e98d074d27:0000000000000000. 04/04 17:09:30 IKE phase-1 negotiation is failed as initiator, aggressive mode. Failed SA: X.X.X.X[500]-X.X.X.X[500] cookie:54ec63e98d074d27:0000000000000000. Due to timeout. 04/04 17:09:30 iph1->ivm == NULL 04/04 17:09:10 IKE phase-1 negotiation is failed. Peer's ID payload <some.domain.com> ( type fqdn) does not match a configured IKE gateway.
Cheers,
-Kiwi
... View more
05-12-2017
02:40 AM
2 Kudos
i'm seeing this log once the problem started iph1->ivm == NULL
... View more
09-22-2016
08:07 AM
Dears, Thanks all for clarifying a soluton for such NAT scenario. I think there sholuld be a document for different NAT scenarios to compare between ASA and PAN. Thanks all.
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
