This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About rxie
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About rxie
05-23-2023
11Posts
3Likes
0Solutions
May 23, 2023Last Visited
User
Activity
User
Profile
Latest posts by rxie
| Subject | Views | Posted |
|---|---|---|
| 311 | 04-19-2023 07:26 PM | |
| 3577 | 08-01-2022 01:23 AM | |
| 3601 | 07-31-2022 08:05 PM | |
| 1622 | 05-02-2022 06:25 PM | |
| 1670 | 05-02-2022 02:57 AM | |
| 2560 | 03-17-2022 06:35 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 07-31-2022 08:05 PM | |
| 2 Likes | 03-17-2022 06:35 PM |
User Badges
Community Statistics
| Member Since | 06-17-2021 07:24 PM |
| Date Last Visited | 05-23-2023 03:02 AM |
| Posts | 11 |
| Total Likes Received | 3 |
08-01-2022
01:23 AM
-looks like transmit layer level reachability issue.
-make sure the firewall can reach the destination ip:5009 from the specified source of user-id service.
-take a tcpdump on the management port, then view the pcap:
> tcpdump filter "host X.X.X.X and port 5009"
> view-pcap mgmt-pcap mgmt.pcap
-might as well open a case to PA TAC
... View more
07-31-2022
08:05 PM
1 Kudo
suggestions:
1. >tail follow yes mp-log distributord.log --- to look for error logs
2. if needed, turn on debug or dump level logs
admin@PA-VM-Site-B(active)> debug distributord on XXX debug debug dump dump error error info info warn warn
3. check out https://live.paloaltonetworks.com/t5/customer-advisories/intermediate-certificate-authority-expiry-impacting-user-id/ta-p/454763
... View more
05-02-2022
06:25 PM
Then seems the device is not working as expected, maybe you can open a case to PA support.
... View more
05-02-2022
02:57 AM
Hey there,
Quotas: detailed: 60.00%, 282 GB Expiration-period: 30 days ...
Disk usage: detailed: Logs: 137161 MB, Current Retention: 14 days
Here " Expiration-period: 30 days" means the Max Day set fort the specific kind of log ”detailed logs“ is 30 days, if a detailed log is older than 30 days, Panorama deletes it. If you don't set a "Max Day", then Panorama only deletes the old logs when the disk is full and new logs must be written. “Current Retention: 14 days” means the oldest detailed logs on the disk is 14 days old.
If the device is working fine, wait for a few moredays and you should be able to see "Expiration-period: 30 days" and also “Current Retention: 30 days”
... View more
03-17-2022
06:35 PM
2 Kudos
>Founf this in the release note: GPC-6663 The GlobalProtect app for iOS does not support SAML authentication when you configure GlobalProtect with the User-logon (Always On) Connect Method (NetworkGlobalProtectPortals<portal-config>Agent<agent-config>App). This limitation is due to the Apple Network Extension framework, which blocks network connections from the GlobalProtect app (where users are authenticated to their organization’s SAML identity provider) until the VPN tunnel is created. # https://docs.paloaltonetworks.com/globalprotect/4-1/globalprotect-app-release-notes/gp-app-release-information/limitations.html > In the newer versions 5.1,5.2,5.3 and 6.0 I didn't see information that this issue got fixed, (since it's due to the Apple Network Extension framework, probably it can not be fixed on our side alone?). >Work around found here in this article, please follow the resolution to configure On-demand as Connect Method for IOS devices. #https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PMfYCAW >Is there any solution to this?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-23-2023
03:02 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks