About RohJaewoong

Hi guys, Sometimes, the firewall has got a increasing drop counter simultaneously as following. "flow_fpga_rcv_err" - Packets dropped: receive error from offload processor packet drop : offload processor parse error I want to know it is expected behavior or not. If it is expected behavior, Please let me know in detail. Thanks. Regards, Roh ... View more

Hi guys. Nowadays I have got a project for installing PA7050 but I confused about the PA7050 how many security rule supported for PA7050. Several months ago, I checked the DataSheet and Compare tools of PA7050 that mentioned PA7050 supported 80,000 rules officially. For now the below link also mentioned that PA7050 can support 80,000 rules.  What is the Maximum Number of Rule Objects Supported? However, For now compare tool showed that PA7050 supported only 40,000 rules and PA7050 box also said that supported 40,000 rule only via command "show system state | match policy". What is correct capacity of rules for PA7050 box? Supported 80,000? or 40,000 only? Anybody knows about that issue? Please let me know correct answer. Thanks. Regards, Roh ... View more

Hi guys, I have question about PaloAlto Custom Report. I can find that document for getting used rules with counter from customer report as How to Create Custom Report to Show The Least Used Rules in Security Policies But Customer want to know exactly UNUSED RULES WITH COUNTER from custom report. Is it possible? Customer really want to have that custom report can show entries of rule-name with no count. If not, I want to have feature request to PaloAlto HQ. Above is a sample of used rules with counter from custom report and that don't contain entry of unused rule with no repeat count. Thanks. Regards, Roh ... View more

Hello guys, I have a issue about the IPsecVPN tunnel.  One side of IPsecVPN tunnel is slow for receiving traffic but opposite side is OK to receiving traffic. flow_tunnel_activate                       2        0 info      flow      tunnel    Number of packets that triggerred tunnel activation flow_tunnel_decap_err                  47373        0 drop      flow      tunnel    Packet dropped: tunnel decapsulation error flow_tunnel_ipsec_replay_err           47372        0 drop      flow      tunnel    Packet dropped: header sequence number is a replay flow_tunnel_ipsec_wrong_spi                1        0 drop      flow      tunnel    Packet dropped: IPsec SA for spi in packet not found As you above that flow_tunnel_decap_err and flow_tunnel_ipsec_replay_err counter are being increased and I believe that dropped packet caused above counter that makes slow to tunneled traffic. I also disabled the option the replay protection on IPsecVPN configuration as below. But flow_tunnel_ipsec_replay_err counter is being increased for now even if anti-replay option disabled.               <tunnel-monitor>                 <enable>no</enable>               </tunnel-monitor>               <anti-replay>no</anti-replay>               <copy-tos>no</copy-tos>               <tunnel-interface>tunnel.1</tunnel-interface> I cannot understand why above counter increasing and tunneled packet are being dropped. I read that similar case IPSec Tunnel is up but Packet is Getting Dropped with Wrong SPI Counter Increase but I cannot solve the my case. Anybody knows about this issue? if yes, Please let me know and help. Thanks. Regards, Roh ... View more