This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About MavioLee
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About MavioLee
09-20-2022
24Posts
1Like
0Solutions
Sep 20, 2022Last Visited
User
Activity
User
Profile
Latest posts by MavioLee
| Subject | Views | Posted |
|---|---|---|
| 1108 | 09-19-2022 06:44 PM | |
| 1151 | 09-19-2022 04:41 AM | |
| 1238 | 09-17-2022 04:13 AM | |
| 1340 | 09-12-2022 09:29 PM | |
| 1426 | 09-09-2022 03:28 AM | |
| 814 | 09-04-2022 12:32 AM | |
| 1836 | 09-04-2022 12:26 AM | |
| 1174 | 09-01-2022 02:01 AM | |
| 1151 | 09-01-2022 01:51 AM | |
| 1198 | 08-31-2022 02:49 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 09-01-2022 02:01 AM |
User Badges
Community Statistics
| Member Since | 08-23-2022 01:54 AM |
| Date Last Visited | 09-20-2022 03:09 AM |
| Posts | 24 |
| Total Likes Received | 1 |
09-19-2022
06:44 PM
I know the problem now
there is another interface using the same network address and netmask same as DHCP client
now it can online now
but validate old image 10.0.0 and 10.2.0 has no selection to validate
though I do not know where it get base image of 10.2 , I do not dare to delete 10.0.0 and 10.2.0 to download through internet again
because previously it failed to download
I just afraid next time it reboot or restart , it will need to factory reset again
today afternoon, support said SSL decrypt need default certificate
then I enable back certificate of china, hong kong ,japan korea , taiwan and thailand default certificate,
but there is no save button to save change and no commit need
then I change one of interface static IP address, still no commit and no save changes
then I change from super user to admin user and find no need to commit change, the certificate had already been enabled
why it bypass save change and commit after change IP address of unused interface?
... View more
09-19-2022
04:41 AM
I have factory reset , connected outside port with wifi router
originally see two light flashing at outside port
but after snapshot config load or may be after a while , the outside port has only one left light on , and DHCP of outside vlan
originally can get ip address but after a while , the DHCP client of outside vlan back to initial state
can not get IP address, then i set fixed IP address, it still one left light on, the other light is off
is recent DOS vulnerability make ethernet ports malfunction ?
I have requested RMA, but afraid of this happen the same , I think the difference is start from 9.2 I will not import snapshot config
in the beginning but configured to get license first
the base image is deleted in software , I do not know whether maintenance mode get the version 9.2
because when it boot , it show 10.2 banner , now can not get license because outside port has problem
... View more
09-17-2022
04:13 AM
last week 95% root partition usage alarm, then I clear disk space
last week deleted base image wrongly then i try to download again but failed in web then today I power socket is unplugged and restarted, ethernet 1/1 not function
uploaded manually 10.0.0 and 10.2.0 it show uploaded but it can not load base image after restart, now ethernet 1/1 can not have function and light firewall is totally out of function I try to change IP address of management interface with subnet of wifi router but commit force failed due to certificate error there is no other ports to download 10.0.0 image through internet
what should I do now?
... View more
09-12-2022
09:29 PM
still send failed PA-...hr-interval after disabled telemetry
this is the main toplic
how to delete telemetry files ?
https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/certificate-management/obtain-certificates/device-certificate/device-certificate-firewall
can not generate otp
can not find CDL in customize in service route configuration
Device Telemetry Statistics: device-health-performance: last-attempt: Wed Sep 7 14:12:07 HKT 2022 last-success: N/A num-of-failed-attempts: 184 reason: CDL Receiver Key Empty status: failed product-usage: last-attempt: Wed Sep 7 14:12:07 HKT 2022 last-success: N/A num-of-failed-attempts: 184 reason: CDL Receiver Key Empty status: failed threat-prevention: last-attempt: Wed Sep 7 14:12:07 HKT 2022 last-success: N/A num-of-failed-attempts: 184 reason: CDL Receiver Key Empty status: failed
... View more
09-09-2022
03:28 AM
still send failed PA-...hr-interval after disabled telemetry, it look like a bug
how to delete and clear these telemetry files ?
yesterday I clear app usage uuid and clear traffic log
but after one day today it had already reached 70% log alarm.
... View more
09-04-2022
12:32 AM
what kind of logs are security engineers looking for in palo alto ?
any tutorial and documents mentioned about these?
... View more
09-04-2022
12:26 AM
how to know which informational level log related with hackers and invasion?
when this can be found, how to deal with this kind of attack and informational log?
For example, in the past, smart install security incident , there kind of log are not crtiical level and not alert level
some security event evidence can be any level of log
... View more
09-01-2022
02:01 AM
1 Kudo
today I think that I need to buy second flash router , one is outside and one is dmz , in order to see inside openvpn traffic and at the same time , page asp not blocked
because negate US location , other US high risk can bypass rule.
though I worry flash router page asp is fake page, i check that session all show openvpn destination IP is the correct country I choose
... View more
09-01-2022
01:51 AM
what is ASC and CSP stand for ?
I think distributor also need to open ticket to ask . Because they can not answer me after product sold
... View more
08-31-2022
02:49 AM
last week temporary allow rule works at rule three after malicious ip rule block and before adult and high risk and medium risk and malware risk blocked
today this rule not work , page asp in flashrouter show blank page, i have to connect outside cable back to wifi router to make the page asp load first in firefox in mobile first and then connect back to palo alto outside port to use page asp
last week this rule is for show openvpn location and provider dropdownlist , today application filter allow US, CA , GB with ssl and web browsing app not work to show page asp because whole page asp is blank today.
i find log show this rule has characteristic malware and medium risk, so i suspect category rule block , but there is no exception option in category blocking and object section, it makes rules conflict. and need to enable and disable temporary rule when openvpn unstable need to press disconnect and connect again.
... View more
08-28-2022
07:10 PM
I have premium support auth code,
I bought from service partner , I had phoned palo alto directly , the lady said I can only buy from distributor
then I bought and got auth code and firewall.
... View more
08-25-2022
09:19 PM
I click get help but
but can not select asset though I have asset , i use chrome browser, it show asset , but can not select asset
then i try edge browser which even can not show get help page, worse than chrome
I am new user and bought new palo alto in recent month
... View more
08-25-2022
01:57 AM
before latest content, there are log from outside to outside to show which countries dos and which port they use to attack
but only threat log can show dos attack but no countries show in log
now traffic log can not find which countries dos attack
... View more
08-24-2022
06:02 PM
how to allow NordVPN after done suggestion of BPA for advanced threat license?
I use flashrouter of nordvpn but page.asp can not load and even blank white page shown.
I remove high risk and medium category blocking but can not solve
PA220 configured C2 command and control traffic blocking but cannot find the reason of blocking and can not find which log represent the block because users are using firewall at the same.
Is it possible to tag this flashrouter page.asp traffic to find the cause ?
So far I added a temporary rule after the first block malicious IP list rule to allow ssl and web browsing for a workaround solution , but it need to disable and enable every time the openvpn is down. Openvpn may accumulate a over 8GB value in counter which I do not this value too large or due to the 8GB openvpn is stored so openvpn flow is down ?
Now I know not the C2 Block it , because after temporary rules are quic block rule and category block rule and SSH tunneling and SSH , telnet block rule. These are suspected rules
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-20-2022
03:09 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks