Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- ›
- About abjain
About abjain
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
11-10-2020
40Posts
10Likes
12Solutions
Nov 10, 2020Last Visited
User
Activity
User
Profile
Latest posts by abjain
| Subject | Views | Posted |
|---|---|---|
| 953 | 08-03-2017 01:51 AM | |
| 1255 | 08-03-2017 01:50 AM | |
| 1206 | 08-03-2017 01:46 AM | |
| 2669 | 08-03-2017 01:42 AM | |
| 438 | 07-27-2017 06:58 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 03-16-2016 10:25 PM | |
| 1 | 07-04-2017 08:16 PM | |
| 1 | 08-03-2017 01:51 AM | |
| 1 | 07-27-2017 06:52 PM | |
| 1 | 07-17-2017 08:48 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 4 | |||
| 1 | |||
| 1 | |||
| 6 | |||
| 4 |
User Badges
Public Statistics
| Date Registered | 04-27-2015 12:07 AM |
| Date Last Visited | 11-10-2020 11:23 PM |
| Total Messages Posted | 90 |
| Total Likes Received | 10 |
08-03-2017
01:51 AM
1 Kudo
Please open a TAC case. They will have to inspect this and get it rectified if its a decoder issue.
... View more
08-03-2017
01:50 AM
Do you mean you are setting up GlobalProtect on Palo Alto Firewall, and when you try to access the page: https://<ip-address-of-portal> you get a IIS7 Page? Firewall will not return a IIS7 page. Maybe you have a port forwarding configured which is forwarding your connection to a Windows Server. https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-GlobalProtect/ta-p/58351 Please make sure that your connection is terminating on the firewall. You can check your session on CLI: show session all filter source <ip of your client> (use public IP if accessing from outside) See if there is any NAT happening here.
... View more
08-03-2017
01:46 AM
I would suspect that there may be some traffic issues. Possibly for those sessions which are already established. I would suggest to give a try with some live traffic. Firewall has to internally create a map of ports and ids to forward the traffic. Also MAC address linked to HA3 ports will change. It is possible that the existing packets or sessions might see some issue during the change. You can assume this to be same as if you change a network port from a standalone to HA or AGG port. If you run into issues with live traffic in your lab, I would suggest open a TAC case to investigate.
... View more
08-03-2017
01:42 AM
Probing is a mechanism for firewall to verify if a user is still linked to a certain IP address. The LDAP server creates user-to-ip mappings where WMI probing actively verifies a user is still valid. If the probing cache gets too full. Firewall has a limit to how many IPs it can probe at a givem point of time. If the probing interval is too aggressive you have more chances of running into this issue. You can adjust the probing interval to a more appropriate value to avoid this.
... View more
07-27-2017
06:58 PM
I see a similar issue in the database and looks like its addresses in 8.0. Is it possible to give 8.0.X a try? I woul suggest to open a TAC case so that they can help investigate more and if applicable request a backport in 7.1
... View more
07-27-2017
06:52 PM
1 Kudo
You can set the system setting target-dp to each one: (applicable to platforms with multiple DPs) set system setting target-dp dp0 show session info set system setting target-dp dp1 show session info set system setting target-dp dp2 show session info set system setting target-dp none Extract values from each and then add.
... View more
07-19-2017
10:49 PM
It's internal debug tool for ui used by developers. Customers should not be using it. Sorry cannot say the shortcut here 🙂
... View more
07-19-2017
10:27 PM
"> show session info " output contains current throughput, packet rate etc. You can fetch this via xml api and plot it. However this is not historic or average value and shows the value at that point. You can also use netflow to send interface based statistics. : https://www.paloaltonetworks.com/documentation/61/pan-os/pan-os/reports-and-logging/monitor-the-firewall-using-netflow.html CLI can be used as well to check live packet rate on each interface: https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Check-Throughput-of-Interfaces/ta-p/58812 However this is not something you can fetch using a monitoring tool.
... View more
07-17-2017
08:48 PM
1 Kudo
Hi, I have tested this on 7.1 and 8.0. It works. Not exactly sure since then is this supported but in these versions firewall will open predict session for GRE traffic. Best Regards
... View more
07-16-2017
06:33 PM
Could you check the GP client logs, PanGPS.log and PanGPHipMP.log and see if it is reporting any errors. It could be a software isssue, I would suggested to open a TAC case for the same.
... View more
07-13-2017
08:40 PM
On Panorama, commit link will stay active even if any device group or template devices are out of sync. Can you confirm that all your firewalls managed from Panorama are in sync?
... View more
07-13-2017
08:36 PM
What kind of features are you using on the firewall? 1. Captive Portal? 2. Security Profiles? 3. Security policies with applications? 4. SSL decryption? Have you tried creating a trust to untrust allow all policy and see if it works? We have seen Palo Alto GUI interface or GP or Captive Portal Page returning 502 bad gateway some times. Is it possible that this traffic is getting redirected somehow to Palo Alto Interface?
... View more
07-11-2017
06:23 PM
Hi, Could you enable debug on GUI: https://<ip-address>/debug https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Run-a-PAN-OS-Web-UI-Debug/ta-p/58117 Then do the changes you are talking about from GUI, and then refresh the debugs. If the debugs dont give much idea, please open a case with TAC. This may be a software issue they can help take a look into. BR
... View more
07-10-2017
07:07 PM
Are you able to perform a capture and packet-diag for the BFD packets from Zone B to Zone A? If yes please attach them here. If you have a TAC case please give me the number. I can help take a look.
... View more
07-10-2017
07:03 PM
Hi, More details on design and network topology would help to suggest better. In general, it is hard for you to decide which route to accept in OSPF. You can ofcourse put your PA as a Total Stub so that it wont accept any Type3,4,5. However you need to design it properly as other OSPF speaking neghbors will also be affected. -BR
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-10-2020
11:23 PM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
