About Nikko

Nikko · ‎09-15-2021

Hi @PavelK , The article that you posted seems to be strange, mine is working fine. In my setup, I can see logs from the firewall (overseas) to Panorama (local) but the thing is it has different timings that is why I asked in this thread what time zone does Panorama follows, is it the firewall's local time zone or the Panorama's local time zone. It's a bit strange. Thanks.

Nikko · ‎09-15-2021

Hi Guys, This seems to be a weird question but I am thinking about it for a while. Let us say the Panorama is in US with US time zone configured and the firewall is in UK with UK time zone. My question is what will be the timing shown in the logs in Panorama when the firewall sends the logs to Panorama? Will it be US or UK timing? Thanks

Nikko · ‎05-10-2021

I have a use-case that all subnets/VLANs should be able to access the server (192.168.4.4) via HTTP using the loopback IP address 192.168.6.2/32. The PA firewall is the gateway for all the VLANs. I would like to confirm if this is possible? The source will be VLAN 5 or VLAN 10 and destination is VLAN 20's loopback IP 192.168.6.2/32 using HTTP service then the PA should redirect the traffic to VLAN 30's 192.168.4.4 address. Thanks

Nikko · ‎02-10-2021

Hi Guys, I would like to know what are the difference between the following actions in the security rules for PA. 1. Deny 2. Drop 3. Reset-client 4. Reset-server 5. Reset-both Which of these are the most preferred to use? Is deny or drop action also resets the connection for both server and client? Thanks

Nikko · ‎01-25-2021

Hi Guys, Just want to seek your inputs about what can be the best integration approach for this scenario. Currently, the VLAN gateway is in my core switch and I will be introducing PA FW into my network. I want to have control and visibility for my intervlan switching, will the virtual-wire approach be the best for this scenario? I am a bit not convinced if the virtual wire will be able to solve what I want for the intervlan because my current gateway is in the core switch. Thanks

Nikko · ‎12-10-2020

Hi @BPry , noted but is it possible to have an AE interface to be an HA1 or HA2 so that we can bundle up those ports to increase bandwidth and having backup links altogether like the capability of ASA of Cisco? Thanks

Nikko · ‎12-09-2020

Hi Guys, I have configured each of my HA links to have backup links. I would like to know, are the backup links also sending and receiving traffic like port-channel in which both ports are active? Especially the HA2 if we want to have 20G or more links for session sync. Thanks

Nikko · ‎12-01-2020

Hi Guys, Anybody here what is the default RAM and CPU number of a M-200 Panorama server? I've checked the guides and data sheet but I can only see the VM version. Thanks in advance.

Member Since	‎11-19-2020 10:28 PM
Date Last Visited
Posts	8

About Nikko

Re: Panorama and Firewall in Different Timezones

Panorama and Firewall in Different Timezones

PA Destination NAT

Different Actions for Security Rules

Best Placement Integration Approach

Re: HA1 and HA2 Links

HA1 and HA2 Links

Technical Specs of M-200