About Gaurav.Singh

Hi Community,   I am trying to set a GRE tunnel between Palo Alto PA-850-ZTP and zscaler. Issue: I have tunnel.1 and tunnel.2 created as Primary and Secondary.    static routed default towards Internet.   GRE tunnel Primary and secondary configured with Public local and peer IPs with tunnel interface .1 and .2 respectively.   PBF rule is created for Primary and secondary Tunnel: I am able to ping from tunnel private IP of Palo alto to Zscaler side and all the logs are fine.   But when I try to failover to Secondary I cant ping to from palo tunnel Private IP to Zscaler tunnel private IP.    I failed over by disabling Primary GRE tunnel.    Please suggest what I am missing so that I could able to failover and use the secondary GRE tunnel.    Thanks.  #GRE_tunnel  #failover GRE Tunnel to Zscaler failover   ... View more

Hello Community,   I am working right now with PHP scripting to merge the services (in lower device group)  to shared services and replace it service groups and rules by shared service. For example, I have a service (TCP-443) in lower device group which I want to merge with the service (tcp_443) from shared in Panorama.  I am using the below script which has worked fine most of the time but in one case it caused issue.   php pan-os-php.php type=service-merger in=api://lab_panorama.com location=PHPTEST allowMergingWithUpperLevel 'pickFilter=(name regex /^tcp_/) or (name regex /^udp_/)'   Example output:  value 'TCP-443' * using object from upper level : '/PanoramaConf:/ServiceStore/Service:tcp_443' - replacing '/DC08-DT-App01/ServiceStore/Service:www_TCP' ... - deleting '/DC08-DT-App01/ServiceStore/Service:www_TCP'   While running the script for whole device group to match with the pick filter and merge with upper level, it instead of merging the service with the upper level service, it went to delete it first. Due to which the service being used in rules/service objects were never replaced and was deleted, which cause traffic block on that service.    I confirmed the config log and found the service was deleted during the same time by the same API admin account.  Now I dont feel safe to use this PHP script as it might do this again and could cause big issue.    Does anyone has experienced the similar issue while running the PHP script or if anyone has idea, what could be the issue.   Thanks   ... View more