About tiwara

Hello Team, We are not able to access the below URL : tn3270e.amadeusprintservices.com As per the website support team they have advised to enabled the below port to access the URL : TCP 9876,443,80 We have already allowed the web browsing traffic for the network . what to do for 9876 port. Please advise. ... View more

We have site to site VPN (both side PA) in our network, I want to send some encrypted traffic over the tunnel , How the palo alto will decide the encrypted traffic not to be scanned (threats) and filtering rule also not applied for the those traffic. Please suggest. ... View more

Hello Team, Can anyone please explain me how the Panorama and Firewall connection works. Connection Type , Port, Type of Traffic etc.. Thanks in advance Regards Amber Tiwari ... View more

Hello Team, We got the below threat alert from the panorama and not able to understand the most of the part , like source and Destination . Both IP looks the outside my network but still its showing the rule: Outbound_Default_URL_IPS . One of my outbound policy with threat prevention rule. Can any one please explain me this . Wondering How can an external IP be the source IP on an internal interface of the firewall? THREAT ALERT : high : 169.254.254.238 -> 169.254.255.255 Microsoft Windows NAT Helper DNS Query Denial of Service(31339) alert domain: 1 receive_time: 2014/08/13 03:10:35 serial: 001801004403 seqno: 30536660 actionflags: 0x0 type: THREAT subtype: vulnerability config_ver: 1 time_generated: 2014/08/13 03:10:30 src: 169.254.254.238 dst: 169.254.255.255 natsrc: natdst: rule: Outbound_Default_URL_IPS srcuser: dstuser: srcloc: 169.254.0.0-169.254.255.255 dstloc: 169.254.0.0-169.254.255.255 app: dns vsys: vsys1 from: trust to: untrust inbound_if: ethernet1/2 outbound_if: ethernet1/1 logset: Panorama time_received: 2014/08/13 03:10:34 sessionid: 7567 repeatcnt: 1 sport: 53 dport: 53 natsport: 0 natdport: 0 flags: 0x80000000 proto: udp action: alert cpadding: 0 threatid: Microsoft Windows NAT Helper DNS Query Denial of Service(31339) category: any contenttype: behavior: 0x0400000000000000000000000000000000000000000000000000000000000000 severity: high direction: client-to-server misc: ... View more

Inbox | Palo Alto Networks Live Hello All,   I have faced the similar kind of issue for panorama , one Job got stuck in 40% and we are not able to commit to the panorama. Also the management CPU was 100.   Well after restart the management server the issue is resolved for clearing the job .but i took the PA support guy to clear the PID to reduce the management CPU utilization.   We have faced this issue twice in continuously two days. Can anyone please advise for the permanent fix for the issue .   We are at  5.1.6 panorama version. Shared with Jive Anywhere https://live.paloaltonetworks.com/inbox ... View more

Hello Team, We have hosted our panorama in a VM server . Where primary partition of the server is 70 GB and Secoundry partition is 40 GB. Currently we have only the 40 GB to store the Pan Log . Please find the partition details. tiwara@Panorama> show system disk-space Filesystem Size  Used Avail Use% Mounted on /dev/sda3 3.8G  1.6G  2.1G  43% / /dev/sda5 7.6G  5.8G  1.4G  81% /opt/pancfg /dev/sda6 3.8G  2.2G  1.5G  61% /opt/panrepo tmpfs 1005M     0 1005M   0% /dev/shm /dev/sdb1 40G   23G   16G  60% /opt/panlogs  [need to increase to 120 GB] We want to increase the { /dev/sdb1 40G } to 120 GB , so do we need to increase the primary partition of panorama server  . We have already extended the secondary partition to 120 GB but still the /opt/panlogs space is not increase. We have already rebooted the server. Also Please advise if we delete the secondary partition , do we lose any thing (like logs etc.) Thanks in advance. TiwarA ... View more

Hello Team, I was working on the firewall for report generation and suddenly the GUI stop working , after that i am not able to login to the firewall for 10 min . I saw the below error in the system warning: "websrvr: exiting because service missed too many heartbeats " can any one please explain the error. Thanks Amber ... View more

What is the application need to add in policy to open MS remote Desktop Traffic. ... View more

Hello Team, I have configured the panorama threat alert for one of our firewall and its working fine. Alerts has been configured for High and Critical . we are getting so many alert from one IP (10.32.100.238) , one of vulnerabilities management device . I want to create a rule so that we can exclude the alerts from the source IP 10.32.100.238 and add it to white-list . ... View more

Can anyone please help me categorized the below URL into Malware Sites http://203.197.123.30/clm/clmhome Please advise. ... View more