About CyberEng

Hi, We have static routes in place at 7 sites for routing between sites. In addition we are learning routes via OSPF, and these are set to a higher admin cost so not active. So the static route is active.   When we look in the "runtime stats" route table (Not the forwarding table) of the virtual router, we only see the static routes currently, and we don't see the routes we are learning over OSPF. If we delete the static route, the OSPF route then appears in the routing table.   I was sure all routes (static and dynamic) should be present in the route table, and only active routes would appear in the forwarding table. Has a recent patch perhaps changed the default behaviour here?  Should both dynamic and static routes be visible (even though only the static is active)   Many thanks.         ... View more

Hi, anytime we enable "web security" as recommended on the main dashboard of prisma access, MS Teams and outlook stop working.  Outlook throws up certificate errors and teams refuses to connect.  Upon investigation it looks as though the traffic is being decrypted and this is causing issues.  We have put in bypass decryptions for the "worldwide 365 URL" and "worldwide 365 IP" lists in our network security decryption policy.  However the logs clearly show this traffic is still being decrypted and breaking the application.  It appears that the "web security" feature / policy later is overriding anything set at the network security layer with regards to encryption. As soon as we disable "web security" the applications start working again.  How should we configure the web security feature to bypass decryption for all M365 URLS and IP's?   Many thanks. ... View more

Hi, I am following the pan admin guide below to onboard a production HA pair.     https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-firewalls/transition-a-firewall-to-panorama-management/migrate-a-firewall-ha-pair-to-panorama-management   it is not clear what the final template/stack setup will be.  If I follow the article exactly then I am left with 1 template stack, containing 1 template, and both firewalls in the pair assigned to the stack - all good.  However, this leaves me with what seems to be a now-redunandant template, which is not in any stack, that was created when the second firewall in the pair was onboarded.  Can I simply delete this template?  So the final setup will be 1 T-stack, containing 1 template, both firewalls in the HA pair assigned to the stack?   Many thanks Graham.   ... View more