About darcymixon

Has anyone upgraded to 5.0.8?  I am wanting to upgrade my PA-500's and HA 2050 cluster (currently on 5.0.3) to correct some of the memory, CPU issues.  I also have an HA 4050 cluster on 4.0.12 that needs to be upgraded.  Can anyone tell me what their experience has been with 5.0.8?  Specifically with HA behavior, user-ID agent and memory issues? Thanks!   ... View more

Anyone with a HA 4050 Cluster, can you please tell me the pros/cons of code 5.0.3 and 5.0.6?  I am looking to upgrade my HA pair and have noticed CPU imbalance issues, high management plane issues with 5.0.1 on my 500, 2050's.  I want to upgrade but am worried the CPU issues are not addressed/corrected with 5.0.3 and/or 5.0.6 when upgrading a 4050 cluster.  Please give me your opinion. Thanks!! ... View more

I am running OS 4.0.12 and have an issu with the user-ID / mappings not populating in the logs.  show user pan-agent statistics: IPs      Activity Timer(s) Domain          Index ncmpdcden01      10.250.12.10    5009  vsys1   *connected, ok     989    906 651185   21844256 600      ncm             0 show user ip-user-mapping: IP              Ident. By User                             Idle Timeout (s) Max. Timeout (s) Total: 0 users I read in documentation how to restart the service via the PAN CLI, but the debug user-id, etc command is not available in 4.0.12...  How can I restart the user-id connection?  Or is there a better way to correct this issue?  The PAN service on the DC's have already been restarted. Thanks! ... View more

I recently upgraded to PAN 5.0.1.  I am now receiving the following alert - Clearing snmpd.log due to log overflow.  I have been trying to get more information on this alert but have been unsuccessful. I am concerned with what the log overflow is referring to.  Do I need to tweak my default configuration for log retention in the 5.X code.  Is this simply that the logs have hit the quota then "rolled over" with the new data (overwriting the old)?  ... View more

Hello- I am running PA-4050's in an HA oair with s/w version 4.0.7.  I have a "guest-wi-fi" zone and Untrust Zone.  I currently have an outbound NAT rule for the Guest wifi pool (10.250.98.0/24) to the Untrust Zone using the source address of the wifi pool (10.250.98.0/24) going to destination "any" using dynamic IP and Port translation to 123.123.123.123 (external address used for our guest wifi users).  I believe I need the reverse NAT in order to properly route traffic back to Guest wifi users.  My question is would the inbound NAT work with this configuration: Source zone: Untrust to destination Zone Untrust, source address "any" destination address 123.123.123.123, service "any" source translation "none" destination translation "Guest LAN - 10.250.98.0/24).  Or do I need the source translation as the 10.250.98.0/24? Thanks! Darcy     ... View more

Hello, I am currently running PAN OS 3.1.7 on my 4050 corporate cluster.  Can I upgrade from 3.1.7 to 4.0.1?  Should I upgrade to a later version of the 4.0 code?  I know there is a known issue with 4.0.5 but what about 4.0.4?  Is it a stable code? Thanks! Darcy ... View more