Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
- COVID-19 Response Center
About aglej
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About aglej
08-18-2015
10Posts
1Like
0Solutions
Aug 18, 2015Last Visited
User
Activity
User
Profile
Latest posts by aglej
| Subject | Views | Posted |
|---|---|---|
| 3074 | 04-09-2014 07:24 AM | |
| 2500 | 10-09-2013 07:39 AM | |
| 2500 | 08-15-2013 05:12 AM | |
| 5267 | 08-14-2013 07:22 AM | |
| 5267 | 08-13-2013 05:14 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 04-09-2014 07:24 AM |
User Badges
Community Statistics
| Member Since | 01-19-2010 12:09 PM |
| Date Last Visited | 08-18-2015 09:06 AM |
| Posts | 10 |
| Total Likes Received | 1 |
04-09-2014
07:24 AM
1 Kudo
Anyone else not able to get this update to show up in dynamic updates? Or am I missing something?
... View more
10-09-2013
07:39 AM
The settings have been implemented on the ASA and the clients as recommended and this did not solve the problem. We're still experiencing the issue and 1-1 NAT is not an option. I've got a case open with PA. If we ever get a solution I'll post it here.
... View more
08-15-2013
05:12 AM
I'm afraid not. This isn't something that comes up a lot for us, just once in a while. But I did try the override rule and that didn't help.
... View more
08-14-2013
07:22 AM
Thanks for the posts so far. There are no deny's at the bottom of the rule base (nor do I see blocks from the router or firewall when trying to establish). We also are not using graceful restart, and the PA interfaces are set for broadcast.
... View more
08-12-2013
02:16 PM
We've got a Cisco 7301 routers that forms OSPF adjacencies with an HA pair of 5020 firewalls. Recently I swapped this router out with a different router with the same IPs but different configs to test a new WAN connection. OSPF forms up just fine with the new router. After testing concluded and swapping back to the old router OSPF freaks out. The adjacencies get stuck in EXSTART. Cisco also says that this is an MTU mismatch condition, not true in my case. Failing the firewalls over did not clear this up, tried twice. Rebooting them did the trick. After the reboot and a failover the adjacency was just fine. Aug 11 00:15:14: %OSPF-5-ADJCHG: Process 200, Nbr 10.16.0.12 on GigabitEthernet0/0.200 from EXSTART to DOWN, Neighbor Down: Too many retransmissions Aug 11 00:16:04: %OSPF-5-ADJCHG: Process 200, Nbr 10.16.1.20 on GigabitEthernet0/0.200 from DOWN to DOWN, Neighbor Down: Ignore timer expired Aug 11 00:17:14: %OSPF-5-ADJCHG: Process 200, Nbr 10.16.0.12 on GigabitEthernet0/0.200 from EXSTART to DOWN, Neighbor Down: Too many retransmissions Wondering if anyone else has seen this type of issue, or at least has any suggestions on how to get the adjacency to form without having to reboot.
... View more
Labels:
- Labels:
-
Networking
-
Troubleshooting
06-13-2013
07:07 AM
I've taken a packet capture and nothing seems glaringly bad, other than it doesn't work (no RST, no timeouts, just stops). Not sure I follow where you're headed with the app override rule.
... View more
06-13-2013
06:53 AM
This is an obscure problem. I've got visitors from another company on our network trying to VPN back to their office with Cisco's VPN client to a Cisco ASA appliance. They are unable to connect, randomly. Most of the time, at least one can connect, but never all 5 of them. All my users (including these visitors) are NAT'd to the same IP address. So all these clients appear to their VPN concentrator as the same IP. I'm wondering if this might be a NAT issues between Palo Alto and Cisco. Might be way off the mark here but any insight would be helpful.
... View more
Labels:
- Labels:
-
Configuration
-
Networking
-
Troubleshooting
04-02-2013
06:14 AM
We've got an HA pair of 5050s. They both have a job to download and install dynamic updates at 12:00 AM. I've seen occasions where one of the boxes will download but not install the update. They are also set to push a version of the update to the HA peer. I"m wondering if having them check at the same time and try to push to each other is not ideal. I'm guessing I should consider stopping the HA sync of dynamic updates, or only have one box check for updates and make that one push the update over to the other. Anyone doing similar things?
... View more
Labels:
- Labels:
-
Configuration
-
Management
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks
