This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About cviaud
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About cviaud
08-18-2015
24Posts
2Likes
2Solutions
Aug 18, 2015Last Visited
User
Activity
User
Profile
Latest posts by cviaud
| Subject | Views | Posted |
|---|---|---|
| 3818 | 07-29-2013 01:42 AM | |
| 2387 | 01-23-2013 10:49 PM | |
| 5029 | 01-23-2013 10:00 PM | |
| 5210 | 11-15-2012 07:51 AM | |
| 1345 | 11-14-2012 05:49 AM | |
| 1233 | 11-14-2012 05:40 AM | |
| 2382 | 11-14-2012 05:36 AM | |
| 1220 | 11-14-2012 05:28 AM | |
| 1986 | 11-14-2012 04:59 AM | |
| 1737 | 11-14-2012 04:53 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 11-12-2012 03:16 PM |
User Badges
Community Statistics
| Member Since | 09-01-2011 04:17 PM |
| Date Last Visited | 08-18-2015 09:07 AM |
| Posts | 24 |
| Total Likes Received | 1 |
07-29-2013
01:42 AM
Hi, If you are a partner you can access to the Webservice SDK under the Partner tool community. If you don't see this community open a case, if you are a customer ask to your partner. The WebService SDK is developed by regards
... View more
01-23-2013
10:49 PM
Hi, If think your error is due to the use of the edit action in your second example, you didn't set the element that changed ( in XML API ref doc you will see http(s)://hostname/api/?type=config&action=edit&key=keyvalue&xpath=xpath-value&element=element-value ) wget -O dum1.txt --no-check-certificate " https://192.168.3.114/api/?type=config&key=%palokey%&action=edit&xpath=/config/devices/entry[@name='localhost.localdomain']/network/tunnel/ipsec/entry[@name='StaffanTunnel']/auto-key/ike-gateway/entry[@name='StaffanGW']/ " try that (check the end of the url) &action=edit&xpath=/config/devices/entry[@name='localhost.localdomain']/network/tunnel/ipsec/entry[@name='StaffanTunnel']/auto-key/ike-gateway&element= <entry name=' StaffanGW '/> or try to use the set action. BTW you have to define first the IKE GW before attaching it to an ipsec-tunnel. Below an example with an IKE GW named titi, psk test attached to interface with ip 192.168.100.254/24 and a peer-ip 1.1.1.1 and profile myprofile note: I configured some parameters as example, if some parameters are missing just add them to your config. note 2: the last command is the same than your last command and I got a : <response status="success" code="20"><msg>command succeeded</msg></response> Define GATEWAY with PSK (name titi - PSK : test) action=set xpath=/config/devices/entry[@name='localhost.localdomain']/network/ike/gateway/entry[@name='titi']/authentication/pre-shared-key element=<key>test</key> Define GATEWAY local IP (use this Ip: 192.168.100.254/24) action=set xpath=/config/devices/entry[@name='localhost.localdomain']/network/ike/gateway/entry[@name='titi']/local-address element=<ip>192.168.100.254/24</ip> Define GATEWAY peer IP (in this case the peer GW is 1.1.1.1) action=set xpath=obj="/config/devices/entry[@name='localhost.localdomain']/network/ike/gateway/entry[@name='titi']/peer-address element=<ip>1.1.1.1</ip> Define IKEv1 crypto ( profile myprofile ) action=set xpath=/config/devices/entry[@name='localhost.localdomain']/network/ike/gateway/entry[@name='titi']/protocol/ikev1 element=<ike-crypto-profile>myprofile</ike-crypto-profile>< Attach the ipsec-tunnel to IKE GATEWAY action=set xpath=/config/devices/entry[@name='localhost.localdomain']/network/tunnel/ipsec/entry[@name='toto']/auto-key/ike-gateway element=<entry name='titi'/> regards
... View more
01-23-2013
10:00 PM
Hi, By checking global counter and/or by making a debug packet-diag to see how packets are handled by the device, You will be able to see if there is a issue. If you check your traffic logs, how the UDP traffic on port 16666 is seen (unknown-udp ?) ? Regards
... View more
11-15-2012
07:51 AM
Hi, Could you confirm that you have the Log at end in your security rule options ? Are you using in your profile the dynamic filtering (to request the cloud if the url is not on the device) ? regards
... View more
11-14-2012
05:49 AM
Hi, You need to upgrade your panorama in 5.0, if you want this feature. regards
... View more
11-14-2012
05:40 AM
original post : Hi, Could you share with us some part of your code ? As I understand, your script open a SSL connection to the FW and after that you send multiple request on this SSL connection ? Have you tried to make call URL one by one ? @ steven, you didn't subscribe to an update on the thread created by Ameya ( https://live.paloaltonetworks.com/thread/6190 ), that's why I answer here regards
... View more
11-14-2012
05:36 AM
Hi, Could you share with us some part of your code ? As I understand, your script open a SSL connection to the FW and after that you send multiple request on this SSL connection ? Have you tried to make call URL one by one ? @ steven, you didn't subscribe to an update on the thread created by Ameya ( https://live.paloaltonetworks.com/thread/6190 ), that's why I answer here regards note: I also send this message in the other thread ( https://live.paloaltonetworks.com/thread/6190 ) regards
... View more
11-14-2012
05:28 AM
Hi, there is a mistake in your script: you write "logon" instead of "login" you can use : $class->login($username,$ipaddress); or $class->add($eventtype,$username,$ipaddress); the event type can be login or logout, in this doc: I think there is a mistake. try to use ->login() and ->logout() function instead. regards
... View more
11-14-2012
04:59 AM
Hi, This is how Kiwi syslog works: - Match a line - Execute a script if you don't want a new connection each time, you have to write another script that stay connected to the Agent and you have to modify the current script to publish the User/IP Mapping to the local script instead the UID agent. Please note that the UID-Agent can support up to 100 simultaneous connection and if a connection is up 10 min without any message, the connection will be dropped (you can send some keepalive if you want).
... View more
11-14-2012
04:53 AM
Hi sorry about this late answer, but you can write a perl script that tail the syslog file. inside your perl script you use a regex to parse each line. with this method, all syslog server can be used. but it's better if your syslog server is able to execute a script based on a regex (if the log match the regex, the syslog server execute the perl script). regards Christophe
... View more
11-13-2012
08:17 AM
Hi, You can use that url : /api/?type=op&cmd=<show><config><running><xpath>devices/entry[@name='localhost.localdomain']/device-group/entry[@name='DMZ']/pre-rulebase/nat</xpath></running></config></show> go on http://YOUR.PANORAMA.IP/php/rest/browse.php/op::show::config::running::xpath change the xml content with: <show><config><running><xpath>devices/entry[@name='localhost.localdomain']/device-group/entry[@name='DMZ']/pre-rulebase/nat</xpath></running></config></show> click submit regards
... View more
11-12-2012
03:16 PM
1 Kudo
Hi, There is no need to put quote to an entry. regarding the spamhaus, you can use a linux web server with a crontab that generate a text file, this command can do the trick: curl -L http://www.spamhaus.org/drop/drop.txt | grep -Eo '([0-9]{1,3}\.){3}[0-9]{1,3}/[0-9]{2}' > /path/to/the/file/spamhaus.txt you can use a crontab to schedule the file update (once a day is enough with spamhaus): Edit the crontab file: crontab -e insert this command (this will update every day at 6:00am the file /path/to/the/file/spamhaus.txt) : 0 6 * * * curl -L http://www.spamhaus.org/drop/drop.txt | grep -Eo '([0-9]{1,3}\.){3}[0-9]{1,3}/[0-9]{2}' > /path/to/the/file/spamhaus.txt and close the crontab editor create a dynamic block list object pointing to the correct url to download the generated file. regards
... View more
05-21-2012
05:06 AM
Hi, If you have the ICS version (Ice Cream Sandwich), you can today use the integrated ipsec client to connect on our gateway. But you have to know that we don't support it officially yet (just wait a little) regards
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks