This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About syadav
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About syadav
06-05-2022
90Posts
16Likes
8Solutions
Jun 05, 2022Last Visited
User
Activity
User
Profile
Latest posts by syadav
| Subject | Views | Posted |
|---|---|---|
| 2562 | 08-22-2016 06:26 AM | |
| 2567 | 08-22-2016 06:10 AM | |
| 1574 | 02-03-2016 06:08 AM | |
| 5923 | 02-01-2016 07:04 PM | |
| 4087 | 01-28-2016 06:26 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 01-16-2016 07:47 AM | |
| 1 Like | 02-03-2016 06:08 AM | |
| 1 Like | 01-28-2016 06:37 AM | |
| 1 Like | 01-23-2016 10:20 PM | |
| 1 Like | 01-22-2016 07:46 AM |
User Badges
Community Statistics
| Member Since | 03-19-2015 02:19 AM |
| Date Last Visited | 06-05-2022 01:09 PM |
| Posts | 90 |
| Total Likes Received | 16 |
08-22-2016
06:26 AM
Hi Erez, You need to open the pcap (SCP/TFTP to a computer to view using Wireshark) and check if the DNS req. and response are seen with the DNS response having the answer to FQDN(s) configured. Sandeep.
... View more
08-22-2016
06:10 AM
Hi Erez, To start, you may want to check if the firewall is receving a response for the DNS queries by taking a pcap. Check if the DNS service route is via MGT or data interface and take tcpdump (MGT) or DP capture (Monitor > packet capture) Check the service route for DNS : Thanks, Sandeep.
... View more
02-03-2016
06:08 AM
1 Kudo
@Javith ,
1. Could you take a pcap on the MGMT/Data interface (depending on service route setup) to check what transaction is going between the PA FW and the update server ? and which side seems to terminate the session ?
2. You may also run the following command to check ms.log and devsrvr.log while you attempt to download the panOS version :
> tail follow yes mp-log ms.log
> tail follow yes mp-log devsrv.log
... View more
02-01-2016
07:04 PM
@KiCheon.Lee Following is the link for 7.0 :
https://www.paloaltonetworks.com/documentation/70/globalprotect/globalprotect-admin-guide/globalprotect-overview/what-client-os-versions-are-supported-with-globalprotect.html#80765
... View more
01-28-2016
06:26 PM
@SOC_CSG You can create filter the traffic log for the DNS queries directed towards the Sinkhole address. You may create a report using traffic logs as well :
https://www.paloaltonetworks.com/documentation/61/pan-os/pan-os/threat-prevention/identify-infected-hosts.html
... View more
01-28-2016
06:37 AM
1 Kudo
@KiCheon.Lee Windows server OS are NOT yet supported for Global Protect Agent.
... View more
01-28-2016
06:22 AM
@jdprovine The traffic on PA would be seen as either ESP or ESP-UDP, can you check in the traffic logs on the PA if this traffic is seen ? To ensure you have PA as passthrough allow application "IPSEC" as suggested in below DOC :
https://live.paloaltonetworks.com/t5/Configuration-Articles/Configuring-the-Palo-Alto-Networks-Device-as-an-IPSec/ta-p/58732
... View more
01-27-2016
06:20 AM
@johnshaik If the shadow rules are NOT reporting correctly, then it not something which you want as the warning helps in setting up the rules correctly.
If you are just looking for the reason as why the difference, I would recomm opening a case with Tech support.
... View more
01-27-2016
06:13 AM
@johnshaik Can you check if the rules which are being shadowed actually a subset of the rule which is shawdowing it ?
The idea is to check if the shadow warning is actually valid.
... View more
01-26-2016
08:51 AM
@soporteseguridad Yes, downlaoding and installing 7.0.1 and then downlaoding and installing 7.0.x
... View more
01-26-2016
08:36 AM
@gtomte Perhaps you can try "installing" 7.0.1 as well before installing 7.0.4. Have come across few scenarios where installing 7.0.1 before 7.0.x helped.
... View more
01-26-2016
08:27 AM
@Apadilla 7.0.1 is now the base image for 7.0, please try downloading 7.0.1 and then proceed to download and install 7.0.4.
... View more
01-24-2016
06:17 PM
@sib2017 If we assume that the tunnel is setup fine and only the traffic is failing, you should see UDP/ESP traffic on the Palo alto. Please check cisco documentation which exact port they use for this traffic. ESP protocol number is 50, you may filter with this as well.
... View more
01-23-2016
11:44 PM
@sib2017 If the VPN negotiations itself are failing, then you sould see the request coming from the IP of the PC.
On the PA, you may check if any traffic is denied/dropped between the IP of the PC and the IP corresponding to the destination IP. Packet captures between these IPs would help.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2022
01:09 PM
|
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks