About shasnain

shasnain · ‎11-04-2013

Panorama pushed config does not sync over from the Active PA to the Passive PA.

shasnain · ‎11-04-2013

Have you tried to enable "Adjust TCP MSS" on the untrust interface of the PA. You will find it under the advanced option on the interface.

shasnain · ‎10-29-2013

Hi, You would have to add both the serial numbers of the HA member device in order to push the config to them from the Panorama. If you send the configuration from the Panorama to only one device , the Panorama pushed config does not sync up between two HA pairs. You can add the two devices in one device group and pushed the configuration to them.

shasnain · ‎10-22-2013

shasnain · ‎10-21-2013

Which Sessions Will Sync Between HA Peers?

shasnain · ‎10-18-2013

You can create an email server profile and associate that with the log forwarding profile and add this to the security policy. In the policy add the profiles like AV, anti spyware and vulnerability protection.

shasnain · ‎10-17-2013

You can refer to the following document. PAN-OS 5.0.8: Addressed Issues

shasnain · ‎10-17-2013

Try the following command to see the progress of the download. tail follow yes mp-log pan_bc_download.log

shasnain · ‎10-17-2013

You would need to download the seed file from the support site under the dynamic update page named " BrightCloud Seed File". You can then follow the Document mentioned above.

shasnain · ‎10-10-2013

This issue was reported and Bright cloud was notified and fixed with URL version 4184. So far we have not seen any issues with the new release and seems to have resolve the issue.

shasnain · ‎10-10-2013

shasnain · ‎10-10-2013

shasnain · ‎10-10-2013

You can set the syslog server to none in the log forwarding profile and select the syslog server profile for the system and configuration logs.

shasnain · ‎10-08-2013

Also Can you paste the output for this commands show user group-mapping state all show user group-mapping statistics

shasnain · ‎10-08-2013

I assume you are using a LDAP server profile to pull the groups on the PA and also user ID agent for ip-user mapping. On the User ID agent setting on the PA do you have "use as ldap proxy" enabled? If yes can you disable it and commit on the PA.

shasnain · ‎10-07-2013

Groups not Pulled on the Palo Alto Networks Firewall after Adding a User-ID Agent

shasnain · ‎10-07-2013

You can also try the reports and email scheduler and select the email profile and send a test email. It should right away send an email to your account.

shasnain · ‎10-07-2013

Hi, Can you take a snap shot of your email server profile and put it here. Thanks, Syed R Hasnain

shasnain · ‎10-07-2013

Hi Greg, That is an expected behavior.As per my understanding the only way to assign two IP addresses of the same over lapping subnet is by having their respective interfaces in different virtual routers. Thanks, Syed R Hasnain

shasnain · ‎10-07-2013

have you tried a static bi-directional nat for this traffic.

shasnain · ‎10-07-2013

Hi, You can force the traffic per application through the PBF. Thanks, Syed R Hasnain

shasnain · ‎10-07-2013

Does any change in the AD is reflecting on the PA? Like if you add a new user to a different group, does that change reflects on the PA. Just to make sure that the PA is at fault you can use a softera ldap browser to confirm. Thanks, Syed R Hasnain

shasnain · ‎10-04-2013

You will need to create a log-forwarding profile in the objects tab and select Panorama and Syslog under that and then associate that profile with the policy with URL filtering profile enabled with alerts or block actions. Thanks, Syed R Hasnain

shasnain · ‎10-04-2013

Hi, You can configure the Firewall with a syslog server profile and forward the logs to the syslog server and simultaneously enabled logging to the Panorama also. Panorama cannot be configured to forward the logs from it self to any other syslogs server. Thanks, Syed R Hasnain

shasnain · ‎10-03-2013

Hi, It could be that high volume of traffic is being passed through the unit at a particular time causing the CPU to spike up. If that's the case then 5.0.8 will not fix this issue. We need to track down the root cause of the CPU spiking up this much. You can actually find out from the ACC tab the source of the problem if you have a time frame as when the CPU spiked. Thanks, Syed R Hasnain

shasnain · ‎10-02-2013

Hi, We could have used a FQDN but that is not yet supported as a Feature Request is submitted for that feature to be included. FR ID: 1590. You can ask your systems engineer to send in a vote for that feature. Thanks, Syed R Hasnain

shasnain · ‎10-02-2013

Hi, A feature Request has been submitted for this feature to be supported. FR ID: 1196. Please ask your system engineer to send in a vote too. Thanks, Syed R Hasnain

shasnain · ‎10-01-2013

Hi, The following document might be helpful. How to allow specific channel/user pages but block the rest of YouTube Thanks, Syed R Hasnain

shasnain · ‎10-01-2013

Hi, May be the hardware guide is what you are looking for. PA-3000 Series Hardware Reference Guide (English) Thanks, Syed R Hasnain

shasnain · ‎10-01-2013

Hi, Please refer to the following link. Large Scale VPN (LSVPN) Deployment Guide Thanks, Syed R Hasnain

Date Registered	‎07-20-2011 09:15 AM
Date Last Visited	a week ago
Total Messages Posted	113
Total Likes Received	37

Online Status	Offline
Date Last Visited	a week ago

Strata

Prisma

Cortex

About shasnain