This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About rburgoyne_gci
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About rburgoyne_gci
02-09-2017
10Posts
0Likes
0Solutions
Feb 09, 2017Last Visited
User
Activity
User
Profile
Latest posts by rburgoyne_gci
| Subject | Views | Posted |
|---|---|---|
| 7534 | 05-19-2015 02:47 PM | |
| 7757 | 05-19-2015 01:53 PM | |
| 1833 | 05-18-2015 12:02 PM | |
| 7753 | 05-18-2015 11:57 AM | |
| 8345 | 05-15-2015 12:43 PM | |
| 3642 | 05-15-2015 12:38 PM | |
| 3856 | 05-15-2015 12:15 PM | |
| 3857 | 05-15-2015 12:13 PM | |
| 3857 | 05-15-2015 12:09 PM | |
| 1161 | 03-24-2015 05:49 PM |
User Badges
Community Statistics
| Member Since | 02-17-2015 06:22 PM |
| Date Last Visited | 02-09-2017 09:35 PM |
| Posts | 10 |
05-19-2015
02:47 PM
Right, but the session rematch is the behavior that I want is what I am saying. I want rematch after policy changes and it works for everything except SIP.
... View more
05-19-2015
01:53 PM
Rematch is currently checked, and we are not seeing the expected rematch behavior. Also the SIP sessions dont seem to timeout on their own, I let one sit for 24+ hours and it still showed the session in a discard state. Even rebooting the phone didn't resolve the issues. The only fix is to manually clear these SIP sessions and then everything works again. I've had to position the NAT and ACL at the top of the list so that their line numbers won't ever change as a work around.
... View more
05-18-2015
12:02 PM
Hey guys, we are upgrading our PA-5050s drives from a single 120GB SSD to two 240GB SSDs and I was wondering how long this will take? I assume it will be pretty quick since we are installing two identical fresh 240GB drives but I wasn't sure how long it takes to build the raid and bootup after this. I can't find much in the install docs and I am trying to schedule the maintenance window. I've done drive replacements/upgrades before but not with RAID so that's the only portion I'm unclear on. Thanks,
... View more
Labels:
- Labels:
-
Set Up
05-18-2015
11:57 AM
The problem seems to be the opposite of what you're describing. The policies are changing but the traffic is not getting re-matched for SIP and the session gets stuck in a discard state because its trying to hit incorrect policies via a parent session. I have to manually clear the sessions after a change to the NAT or Security policies which is kind of annoying.
... View more
05-15-2015
12:43 PM
I'm running into an issue where specific NAT and Security policy names or numbers change then the SIP traffic stops working. I found that if I clear the sessions post change then everything starts working again. I believe this is related to ALG, like the SIP traffic is taking the parent session even though it is no longer valid. I see these sessions drop into a discard state. I'm wondering if anyone else has experience the same behavior, we are on 6.0.8.
... View more
Labels:
- Labels:
-
Configuration
-
Networking
05-15-2015
12:38 PM
https://live.paloaltonetworks.com/docs/DOC-4994 I found this document that might be helpful, not sure why you're not seeing the proper group but you might be correct. We only use security groups for this since they are purpose built in our organization so it works out well.
... View more
05-15-2015
12:15 PM
Like the dropdown list doesn't show all the groups? You may have to just filter it in the top portion or add it via cli.
... View more
05-15-2015
12:13 PM
You can verify that its working correctly by using the command in the CLI as an example show user group list show user group name "test\test test"
... View more
05-15-2015
12:09 PM
Navigate to Device > User Identification > Group Mapping and add the group that you want in the Group Include List. You can use the User-ID agent installed on the server as an LDAP proxy or manually configure an LDAP server.
... View more
03-24-2015
05:49 PM
Hey guys, I have a couple questions about OSPF on the PAN. I am running code 6.0.9 and have a recent request to bring up a new OSPF area for a special project. Right now we have OSPF area 0.0.0.0 and everything works great, we haven't had the need for any additional areas until now. I would like to bring up area 0.0.0.1 and only advertise a couple routes from area 0.0.0.0, for example 10.100.0.0/16, likewise I would also like to only allow a couple inbound routes from area 0.0.0.1 into area 0.0.0.0. Looking at the documentation I see how to suppress routes from area 0.0.0.1 but not the other way around. Is this supported? I'm a bit confused and would like some insight into this. Thanks,
... View more
- Tags:
- ospf
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-09-2017
09:35 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks