Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About zarina
About zarina
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
03-04-2020
181Posts
89Likes
70Solutions
Mar 04, 2020Last Visited
User
Activity
User
Profile
Latest posts by zarina
| Subject | Views | Posted |
|---|---|---|
| 921 | 05-28-2014 08:55 AM | |
| 470 | 10-18-2013 09:57 AM | |
| 645 | 10-08-2013 02:35 PM | |
| 530 | 09-27-2013 04:48 PM | |
| 2251 | 09-27-2013 04:35 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 05-14-2013 04:57 PM | |
| 1 | 10-18-2013 09:57 AM | |
| 2 | 09-06-2012 01:23 PM | |
| 1 | 08-07-2013 02:46 PM | |
| 1 | 11-06-2012 03:40 PM |
User Badges
Public Statistics
| Date Registered | 11-14-2011 01:02 PM |
| Date Last Visited | 03-04-2020 02:10 PM |
| Total Messages Posted | 210 |
| Total Likes Received | 89 |
05-28-2014
08:55 AM
It depends on the number of logs the panorama receives. This document might help you with the calculation: Panorama Logging Suggestions for PAN-OS 4.1 and 5.0
... View more
10-18-2013
09:57 AM
1 Kudo
'ez' is the hardware chip present in 4000 platform which is responsible for offloads and QoS. FID is the file identifier descriptor which has the index to this session.
... View more
10-08-2013
02:35 PM
"highlight unused rules" shows the rules that are not used by the device since the start of the dataplane.
... View more
09-27-2013
04:48 PM
1 Kudo
I was able to confirm this behavior in the lab: zones & comments get synced between the 2 devices. This is an expected behavior as the zones & interfaces get synced except for ip addresses in A/A setup. You can refer this document for a list of configs that sync between the peer units: https://live.paloaltonetworks.com/docs/DOC-5086
... View more
09-27-2013
04:35 PM
1 Kudo
You can find the definition for incomplete here: https://live.paloaltonetworks.com/docs/DOC-1549 As for the traffic, you can also look at the sessions to see if there are any packets from server to client. You can view this data from GUI through Monitor -> Traffic logs -> Click on the magnifying glass and look for packets sent and packets received. From cli you can do: show session all filter <interesting traffic> and show session id <id>. You can also look at the global counters to see if there are any drops. You can alos refer to these documents for troubleshooting using counters & captures: https://live.paloaltonetworks.com/docs/DOC-2542 https://live.paloaltonetworks.com/docs/DOC-2310
... View more
09-27-2013
12:20 PM
1 Kudo
You can get this list using API. Generate an API key for the session: https:// <ip_address>/api/?type=keygen&user=<username>&password=<password> and use it in the syntax below: https:// <ip_address>/api/?type=config&key=<obtained_from_above>&action=get&xpath=/config/predefined/application
... View more
09-27-2013
11:50 AM
Do you have the same issue when using a different browser? If you want to add the route from CLI: > configure # set network virtual-router vr1 routing-table ip static-route <name_of_route> + admin-dist adminitrative distance + destination Destination IP address/prefix + interface interface + metric metric value (path cost) > nexthop Next hop to destination > option Route entry option <Enter> Finish input
... View more
09-19-2013
10:12 AM
We will retain the DSCP tag of the ingress traffic. The tag will only be changed when traffic egresses through PAN using a policy which has DSCP tag option set.
... View more
09-16-2013
10:07 AM
You can goto Tools - Palo Alto Networks Blog and click on Submit App for Content team to develop a signature.
... View more
09-16-2013
10:06 AM
1 Kudo
From the GUI: Dashboard -> System Information or Device -> Software : The PAN OS installed has the Currently Installed column checked
... View more
08-07-2013
02:46 PM
1 Kudo
You can view the MP mappings through: > show user ip-user-mapping-mp all DP mappings: > show user ip-user-mapping all
... View more
08-05-2013
03:04 PM
Have you looked at this document https://live.paloaltonetworks.com/docs/DOC-4126 page 11: "..retrieve a dynamic report data using reporttype=dynamic, reportname=custom-dynamic-report, and cmd=report-definition where report definition is the XML definition retrieved from the xml api get"
... View more
07-23-2013
03:49 PM
Also, please make sure you have GP portal and GW license and also the GP data file is installed (Dynamic Updates -> GlobalProtect Data File).
... View more
07-23-2013
03:47 PM
Are you using self signed certificate for the portal & gateway? If not, can you make sure to include the entire certificate chain under Trusted Root CA section of portal config?
... View more
07-23-2013
12:48 PM
Do you see any hip profiles associated with the GP user: > show user ip-user-mapping ip <gp_ip> You can also verify the the hip database: > debug user-id dump hip-profile-database Also, can you look at the sslvpn logs and look for " POST /ssl-vpn/hipreportcheck.esp HTTP/1.1" > less webserver-log sslvpn-access.log
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-04-2020
02:10 PM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
