About mbs.admin

mbs.admin · ‎05-17-2016

Hi, Have anyone tried to configure different HA setup for different VSYS? Let's say VSYS1 is active/active and VSYS2 is active/passive. Thanks, MBS

mbs.admin · ‎12-13-2015

Hi, We are catering Palo Alto to different schools. Is there a way or is it possible for Palo Alto to have different captive portal page per school? Example, school A will have different design of captive portal and school B will have another design. Hope you can help me on this. Thanks, MBS

mbs.admin · ‎11-03-2015

Hi, We are experiencing high latency when using Global Protect. It peaks to 1000ms. We tried to use Cisco VPN to isolate the problem and latency peaks at 90ms. We removed security profiles that may cause latency but it did not work. We also noticed that the problem occurs every morning and traffic is normal again from 1pm onwards. We checked the traffic logs but nothing is unusual. Is someone encountered this before? Thanks, MBS

mbs.admin · ‎11-25-2014

Hi HULK/ssharma, Yes, agree application override will not work with this kind of protocol. Any suggestions how we can bypass sna protocol? We deploy PA in vwire mode. Thanks, MBS

mbs.admin · ‎11-24-2014

Hi ssharma, Just found out that the teller machines are using sna protocol. Is this supported by PAN? Thanks, MBS

mbs.admin · ‎11-24-2014

Hi, We configured Palo Alto in vwire mode between our head office and branches. Setup is like Core <--> PA3050 <--> WAN Switch. There is a specific application that is not working and we create custom application by defining the destination port. We create application override and security policy to allow the specific application but its not working.The application is bank ATM, teller machines. Any help is appreciated. Thanks, MBS

mbs.admin · ‎11-12-2014

Hi, In Forwarding tab under PBR forwarding rule, what interface usually Ping or monitor the IP Address in Monitor option? Thanks, MBS

mbs.admin · ‎11-12-2014

Hi All, Thank you for all your suggestions. It is a great help but I think it's time that we create a ticket for this. Not sure what's happening with my routes. MBS

mbs.admin · ‎11-10-2014

Hi HULK and hshah, Thanks for the feedback. See below output as requested. PA3050-Primary(active)> show system resources | match routed 2900 20 0 120m 20m 9904 S 0 0.5 0:45.05 routed PA3050-Primary(active)> show system resources | match dev 2868 20 0 250m 116m 13m S 2 3.1 2:29.02 devsrvr 662 16 -4 1908 700 472 S 0 0.0 0:00.70 udevd PA3050-Primary(active)> show system resources | match mgmt 2869 20 0 664m 477m 9020 S 0 12.7 4:55.33 mgmtsrvr We also have this weird problem that one of our static route entry is automatically deleted. PANOS version is 6.0.5 h3. Any known issues about it? Thanks, MBS

mbs.admin · ‎11-10-2014

Hi, We implemented PA3050 as internal firewall. We configured it as L3 and caters up to 200+ static routes. When we try to remove a single route in virtual router and commit, approximately 20 minutes before it takes effect. Is this normal in Palo Alto? Thanks, MBS

mbs.admin · ‎12-19-2013

Hi Hari, Thanks for the response. We already have that policy but BGP is not working still . Any more suggestions? Regards, Rex

mbs.admin · ‎12-17-2013

Hi, We have a deployment of Palo Alto in vWire mode. But after it was setup, bgp is no longer functioning. I already created an allow all policy but it didn't work as well. Any advise that can help me to make this work? Thanks, Rex

mbs.admin · ‎08-10-2013

Hi panos Thanks for the reply. I did your suggestion but it's not working. I see at the traffic log that users connecting to 192.168.1.254 are translated to 9.9.9.9 but application is incomplete. The users don't have internet access. As a workaround, users are connecting to the virtual IP and the firewall will connect to the public ftp. This works with their previous firewall and their hoping we can do the same with Palo Alto. Thanks.

mbs.admin · ‎08-09-2013

Hi We have a scenario wherein we should create a virtual private IP in Palo Alto and that virtual IP will connect to a public IP. For example: PA LAN IP: 192.168.1.1 PA PUBLIC IP: 9.9.9.9 Firewall Virtual IP: 192.168.1.254 Public IP: 1.2.3.4 Users will connect to 192.168.1.254 for ftp and 192.168.1.254 will connect to 1.2.3.4, which is a ftp server hosted in the internet. Is this possible? I tried using NAT but it did not work Thanks.

mbs.admin · ‎07-07-2013

Hi Chatri, Thanks for the support. But, after further investigation we think the problem is the communication of PANAgent to Palo Alto Firewall. The connection is intermittent and if we issue a ping command, the connection is stable. I attached the screenshot I got from the system log. every 2 to 10 minutes the agent gets disconnected. Have you encountered this before? Thanks.

Member Since	‎10-05-2011 12:26 AM
Date Last Visited	‎01-08-2022 11:21 PM
Posts	33

Online Status	Offline
Date Last Visited	‎01-08-2022 11:21 PM

About mbs.admin

HA VSYS

Multiple Captive Portal

Slow Network Traffic Using Global Protect

Re: application override not working

Re: application override not working

application override not working

PBR Monitoring

Re: Route Cache

Re: Route Cache

Route Cache

HA VSYS

Multiple Captive Portal

Slow Network Traffic Using Global Protect

Re: application override not working

Re: application override not working

application override not working

PBR Monitoring

Re: Route Cache

Re: Route Cache

Route Cache

Re: vWire Fails in BGP

vWire Fails in BGP

Re: Virtual IP

Virtual IP

Re: Security policies did not take effect after Sleep Mode