Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About gbogojevic
About gbogojevic
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
03-26-2015
09:56 AM
1 Kudo
Hi, Yes, you can use following command " debug software restart <process>" to restart specific process.
... View more
03-17-2015
07:36 AM
I would say that one of the reasons could be DDoS - with this you can see if the traffic pattern deviate from the traffic baseline.
... View more
03-17-2015
07:15 AM
1 Kudo
The Change Monitor report displays changes over a specified time period - this can be useful if you would like to compare the top applications that gained in use over, for example, the last hour as compared with the period ending 24-hours ago. With this statistic you can see increase of specific application usage.
... View more
03-10-2015
06:40 AM
Hi, The statement means that you cannot identify the actual application that is using the ssh tunnel nor you can scan the content. PA can identify if the traffic send in the tunnel is pure ssh (e.g. CLI of a device using ssh) and differentiate when an application is using ssh to sneak through the firewall. As conclusion, you can block applications that use ssh tunnel but you cannot identify which app is actually tunneling within ssh.
... View more
03-06-2015
07:57 AM
1 Kudo
When you try to upload the file the full path 'C:\pa\panupv2-all-apps-489-2600' is being passed to the Firewall as the update file name, and that extra 'C:\pa' is what is throwing off the management server. This problem is more common in Internet Explorer so using a different browser could also fix it - please try with some other browser (some browsers are passing the full path to the pa as the content file name). You can also take a look this doc: https://live.paloaltonetworks.com/docs/DOC-2740
... View more
03-05-2015
07:45 AM
1 Kudo
AFAIK there is not way to refresh manually but this information is updated through dynamic content updates.
... View more
03-05-2015
07:38 AM
PA takes this information from IANA (Internet Assigned Numbers Authority) - from relevant national registries.
... View more
03-05-2015
07:04 AM
Hello, On Palo Alto Networks, a certain set of regions are pre-defined. Each IP can be matched to their belonging zone by using the CLI command: show location ip <IP Address> . For example: > show location ip 54.12.11.211 54.12.11.211 United States The pre-defined regions database that Palo Alto Networks uses is the one defined by the Internet Assigned Numbers Authority (IANA) per globe zones that can be found at the following locations: AfriNIC Africa Region --> ftp://ftp.afrinic.net/pub/stats/afrinic/ APNIC Asia/Pacific Region --> http://ftp.apnic.net/stats/apnic/ ARIN North America Region --> ftp://ftp.arin.net/pub/stats/arin/ LACNIC Latin America and some Caribbean Islands --> http://bgp.potaroo.net/stats/lacnic/delegated << direct link RIPE NCC (Europe, Russia, Middle East, Central Asia) --> http://ftp.apnic.net/stats/ripe-ncc/ You can find more information here Palo Alto Networks Pre-defined Regions
... View more
02-12-2015
01:20 AM
Hi, Palo Alto Networks has determined that Application and Threat Content version 485 may introduce false-positive triggers on certain IPS signatures involving SSL changes in that content release. We removed content release 485 from public update servers and are re-releasing Application and Threat Content 486 with the SSL changes removed. Please be informed that now content 486 is available.
... View more
02-09-2015
08:32 AM
No, that is not supported. Please find more info here: Aggregate Ethernet Interface Requirements in PAN-OS
... View more
02-09-2015
05:01 AM
Hi, You should use User-ID agent 6.0.0 version as well. If you are planning to use 6.0.5, you can then you can go for 6.0.5-h3. Hope this halped.
... View more
02-03-2015
07:31 AM
1 Kudo
Hi, From the CLI you can set management IP address and default gateway with this command: > configure # set deviceconfig system ip-address 10.1.1.1 netmask 255.255.255.0 default-gateway 10.1.1.250 # commit If you want to use tftp server (to transfer files from firewall) it will by default use its management interface (so tftp server has to be reachable via default gateway that is configured on mgm interface, or has to be in the same subnet as mgm interface).
... View more
01-04-2015
11:23 PM
1 Kudo
This can be management server memory leaking issue and it is probably software bug. I recommend you to open a TAC case for this problem.
... View more
11-27-2014
04:39 AM
Hi, You can use XML API for configuration backup. More info can be found here: How to use the XML API to backup your firewall configuration On panorama device, there is option for scheduled config export (SCP and FTP) but for firewalls you can use XML API.
... View more
11-27-2014
12:25 AM
Hi, You have a couple of core dump files - all_pktproc_2 process on the dataplane crashed few times yesterday (this could be software bug). Now, it is running fine, but in order be sure and avoid some future outages, you should open a TAC case.
... View more
11-26-2014
12:14 PM
Hi, You can find more information here Regin Malware (regin.backdoor)
... View more
11-26-2014
03:59 AM
Could you please send output of the "show system files" - If you have some core dump files generated, you should open a case with Palo Alto TAC
... View more
11-21-2014
08:22 AM
Hi Satish, You can check out this document, it provides very good explanation how NAT works with PA Understanding PAN-OS NAT
... View more
11-21-2014
03:36 AM
1 Kudo
Hi, You can find procedure here How to Run a Packet Capture
... View more
11-12-2014
03:26 AM
Hi MBS, It should be interface used to reach that IP address and taken from the routing tabel.
... View more
11-03-2014
01:47 AM
1 Kudo
Hi Tigran, Yes, you should scan the local computer. In addition, you can apply security profile (antivirus, antispyware, vulnerability and URL profile) to the security policy that matches traffic from that specific host.
... View more
11-03-2014
01:34 AM
2 Kudos
Hi Tigran, Incomplete means that either the three way TCP handshake did NOT complete or the three way TCP handshake did complete but there was no data after the handshake to identify the application. In other words that traffic you are seeing is not really an application. So to explain a little clearer, if a client sends a server a syn and the Palo Alto device creates a session for that syn, but the server never sends a SYN ACK in response back to the client, then that session would be seen as incomplete. More information can be found here: Incomplete, Insufficient data and Not-applicable in the application field In addition , for example virustotal.com can provide you more information about specific IP address: https://www.virustotal.com/en/ip-address/111.111.111.111/information/
... View more
08-22-2014
12:39 AM
Hi Hiroshi, Please find table with electrical specification for the PA-5000 Full document (PA-5000 Series Hardware Reference Guide (English)) can be found here: PA-5000 Series Hardware Reference Guide (English)
... View more
08-19-2014
02:52 AM
Hi Roman, No, there is no way to sort the routes by name, but there is a search field at the top of the route window sou you can easily search for specific routes.
... View more
08-15-2014
04:09 AM
Hi, You probably used "Generate Time" instead of "Receive Time" OR you did not specify exact time frame (equal has to be exact "Receive Time" on panorama it is not leq or geq). Can you check that?
... View more
08-15-2014
03:35 AM
Hi, You can use following command: > scp export logdb to <user account>@<IP of SCP server>:<directory path> More information can be found here: CLI Commands to Export/Import Configuration and Log Files
... View more
05-17-2019
28Posts
10Likes
5Solutions
May 17, 2019Last Visited
User
Activity
User
Profile
Latest posts by gbogojevic
| Subject | Views | Posted |
|---|---|---|
| 945 | 03-26-2015 09:56 AM | |
| 593 | 03-17-2015 07:36 AM | |
| 593 | 03-17-2015 07:15 AM | |
| 393 | 03-17-2015 01:34 AM | |
| 256 | 03-10-2015 06:40 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 01-04-2015 11:23 PM | |
| 2 | 11-03-2014 01:34 AM | |
| 1 | 11-03-2014 01:47 AM | |
| 1 | 03-05-2015 07:45 AM | |
| 1 | 03-17-2015 07:15 AM |
User Badges
Public Statistics
| Date Registered | 06-05-2013 12:05 AM |
| Date Last Visited | 05-17-2019 08:22 AM |
| Total Messages Posted | 23 |
| Total Likes Received | 10 |
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-17-2019
08:22 AM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
