This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About KieraMitchell
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About KieraMitchell
03-30-2023
27Posts
11Likes
1Solution
Mar 30, 2023Last Visited
User
Activity
User
Profile
Latest posts by KieraMitchell
| Subject | Views | Posted |
|---|---|---|
| 2127 | 07-18-2022 01:48 AM | |
| 937 | 05-16-2022 03:42 AM | |
| 1943 | 05-12-2022 02:15 AM | |
| 2734 | 05-12-2022 01:34 AM | |
| 2743 | 05-12-2022 01:29 AM | |
| 2736 | 05-12-2022 01:11 AM | |
| 2562 | 05-11-2022 01:37 AM | |
| 2238 | 05-09-2022 02:47 AM | |
| 2638 | 05-09-2022 02:41 AM | |
| 2829 | 05-07-2022 01:39 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 05-07-2022 01:39 AM | |
| 1 Like | 05-12-2022 01:11 AM | |
| 1 Like | 05-16-2022 03:42 AM | |
| 1 Like | 05-12-2022 01:34 AM | |
| 1 Like | 05-11-2022 01:37 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 3 Likes | |||
| 3 Likes | |||
| 2 Likes | |||
| 2 Likes |
User Badges
Community Statistics
| Member Since | 02-11-2021 08:38 AM |
| Date Last Visited | 03-30-2023 11:28 AM |
| Posts | 27 |
| Total Likes Received | 8 |
07-18-2022
01:48 AM
Hey, I see you didn't get a response to this one.
If this has not yet been resolved, I highly recommend going through the steps outlined here;
https://live.paloaltonetworks.com/t5/prisma-access-articles/firewall-unable-to-register-to-cortex-data-lake/ta-p/282908
If it has been resolved, may I ask how?
Thanks!
Kiki
... View more
05-16-2022
03:42 AM
1 Kudo
Correct, yes!
... View more
05-12-2022
02:15 AM
Just to agree with @PavelK, for our deployments before initiating test failovers we start a ping -t to an interface that will respond to ping. Then, we initiate the failover - we aim for a single missed ping for "auto"-based failovers and three missed pings for "shutdown"-based failovers.
... View more
05-12-2022
01:34 AM
1 Kudo
In most cases, each node has its own DNS name. In my lab, for example, I have https://palo-pri.kiki.lab https://palo-sec.kiki.lab It's designed this way for a number of reasons, including so that each node can have its HA status controlled, reach out the internet for updates, telemetry forwarding, forward Syslog to external servers, etc.
... View more
05-12-2022
01:29 AM
You are correct. Palo Alto firewalls in HA need their own separate management IPs. Kiki
... View more
05-12-2022
01:11 AM
1 Kudo
Interesting - to clarify, did you end up rebooting the box? You should be able to get into the CLI and remove the SSL/TLS Service Profile that's applied to the management interface - it'll then start using the built-in self-signed webgui certificate. Since it sounds like you can get into the console, you can just run "show system info" to get the PAN-OS version and other key details. Failing everything, if you can console in you can save a named config version, export it via SCP or TFTP, and factory reset the box (though there are various things you can try before then).
... View more
05-11-2022
01:37 AM
1 Kudo
Hey @Pras; The values reported in that section of the output of "show system logdb-quota" are the actual usage, not the configured values. That section is telling you that based on the storage quota provided, it's managed to store x number of days of that type of log. For example, in the case of Daily Traffic Summary you have 242MB and 100 days configured. Based on the CLI output, with 242MB available for that type of log, the firewall is able to store 6 days worth of Daily Traffic Summary logs. You can then roughly figure out that if you want to actually retain 100 days worth of Daily Traffic Summary logs you'll need to increase the percentage of the disk allocated to that type of log. In this case, to keep 100 days of Daily Threat Summary logs you'd need to increase its quota to about 4GB. Since the logging disk on this firewall is relatively very small, my recommendation is that you configure log forwarding to something dedicated for log storage and query like Panorama, or forwarding via Syslog for example to a SIEM.
... View more
05-09-2022
02:47 AM
Hi VLim, Keep in mind you'll need to add the "telnet" application that security policy also for telnet traffic to match it. Separately, that "CP-DENY TCP non data packet" may imply the next packet after handshake is being blocked as part of Zone Protection or global firewall TCP Settings.
... View more
05-09-2022
02:41 AM
For reference, that's quite a small logging disk - what model and version of PAN-OS is this? Could you provide the output of > show system logdb-quota Particularly, the part showing the number of days stored for each log type would be useful to know. Here's an excerpt from my home VM-100: Disk usage:
traffic: Logs and Indexes: 423M Current Retention: 90 days
threat: Logs and Indexes: 156M Current Retention: 95 days
system: Logs and Indexes: 579M Current Retention: 90 days
config: Logs and Indexes: 45M Current Retention: 74 days
alarm: Logs and Indexes: 24K Current Retention: 0 days
trsum: Logs and Indexes: 357M Current Retention: 90 days
hourlytrsum: Logs and Indexes: 291M Current Retention: 89 days
dailytrsum: Logs and Indexes: 153M Current Retention: 58 days
weeklytrsum: Logs and Indexes: 57M Current Retention: 85 days
... View more
05-07-2022
01:39 AM
1 Kudo
What version of PAN-OS is the PA-200 running? Sounds like either the authentication or apache processes have done an oops (probably the latter, since you can auth via CLI). You can either restart them individually; "How to Restart the Web-related Processes" - https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POIHCA4 Or, I'd recommend just restarting the whole management server: "How to Restart the Management server "mgmtsrvr" Process" - https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaGCAS If that doesn't help, reboot the box.
... View more
05-07-2022
01:09 AM
3 Kudos
Just wanna say, I love your writing style - it's clear, engaging, and not overloading. You clearly enjoy writing these!
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-30-2023
11:28 AM
|
Latest Tags
No tags yet
Likes Given To
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks