About sdurga

sdurga · ‎05-01-2014

Please open a case with support and provide the associated traffic PCAP. Support will test this and will file a bug with development team.

sdurga · ‎08-08-2013

Interesting, not aware of this feature.

sdurga · ‎08-08-2013

The information that you see in the Monitor-->Logs of the Panorama should match with the information in the Logs on the Firewall. This behavior looks buggy to me, especially full privileged Admins are able to see a different info than the Custom Role Admins. I would recommend to open a ticket with support for further investigation.

sdurga · ‎07-23-2013

Additinoally, this might also help.

sdurga · ‎07-19-2013

You can only manually export the system/config logs to CSV format. If you are looking to automate this, the closest way that I can think of achieving this is configuring forwarding of these logs to a syslog server/ smtp server/ or an email.You can do this in Device tab ---> Log settings ---> system logs/ config logs.

sdurga · ‎07-19-2013

Is the decryption certificate used by the firewall, trusted by the PC from where you are browsing the web-page ? I have seen similar issues, downloading the SSL forward proxy certificate that is used on the firewall and adding it to the trusted root ca folder in certificate store of the pc fixed the issue for me.

sdurga · ‎07-14-2013

looks like a display bug. Try to export the config and re-import the config and load the same, see if it helps.

sdurga · ‎05-31-2013

Try clearing all the Packet capture settings to default and set the filters and the capture files new again. You can clear all the Packet capture settings using the command "debug dataplane packet-diag clear all " Tx, Sandeep

sdurga · ‎05-29-2013

The command that u are using is valid for the custom applications only. For the buit in applications of the PAN like web-browsing use this set shared override application web-browsing risk 2 Thanks, Sandeep T

sdurga · ‎05-28-2013

I see the same behavior in my lab device too. I did not see anything mentioned in the release notes stating that any changes are made to application "gmail". This looks like a bug, please open a ticket with support for a resolution.

sdurga · ‎04-04-2013

Interesting that all of the sessions are of same size. The fact that the web-site is using a port 8080 might be causing some issues here. You can do packet capture on the PC's and see if you are getting any Resets are not. Also try visiting some proxy web-sites that are using port 8080 and if you have problem with them if so then we can narrow the issue to the port. If possible you can contact call support for advanced troubleshooting assistance.

sdurga · ‎04-04-2013

Customer agent sequence is not present in 4.1. If you have more than one User-Id agents configured in 4.1, then the firewall pulls the user-ip info from all of the agents. Tx, Sandeep T

sdurga · ‎02-25-2013

On 5.0.2 this high cpu is because of user-id process. This issue has been identified and a fix is currently being targeted for PAN OS 5.0.3. However on 5.0.1 as far as I know there is no such known issues and I am curious to see what is causing the cpu spikes on 5.0.1, but it seems like we cannot go back to 5.0.1. Thanks, Sandeep T

sdurga · ‎02-25-2013

The following is a good document about the upgrade. The document describes the upgrade of and active passive pair. The same procedure can be applied to an active active scenario. All the steps for the passive can be related to active-secondary. https://live.paloaltonetworks.com/docs/DOC-4043 Thanks, Sandeep T

sdurga · ‎02-25-2013

If the issue is also on 5.0.1, can you please provide the output of the command "show system resources " on device when running 5.0.1 ?

sdurga · ‎02-25-2013

This is not possible currently. You can submit a feature request for the same. Thanks, Sandeep T

sdurga · ‎02-24-2013

Try restarting management server and see if this fixes the issue with subsequent commits. Management-Server restart has zero impact on traffic. You should log-out and log in back after the management server restart. command for the same. debug software restart management-server Thanks, Sandeep T

sdurga · ‎02-22-2013

Yes, you should be able to see the IPV6 traffic in the logs. Thanks, Sandeep T

sdurga · ‎02-22-2013

I have done a quick test on 5.0.1 on my PA and I do see the same behavior. I have excluded the network 10.101.101.0/24 as shown below in the running configuration from the CLI But User-IP-Mappings for the IP of the GP client 10.101.101.125 are still mapped if I access an AD inside my network as shown below This is not working a expected. I would suggest you to open a ticket with support for further help. Thanks, Sandeep T

sdurga · ‎02-22-2013

You can also try this test security-policy-match source < src IP address > destination 192.168.81.81 protocol 6 destination-port 80. Thanks, Sandeep T

sdurga · ‎02-17-2013

Uto 10 servers at the maximum. The more servers you have the more bandwidth you needed between the mgmt interface of the firewall and the DC's. Also it is a burden on the management plane of the firewall.

sdurga · ‎02-17-2013

I think our professional services team helps in configuration migration from other devices as they have the tools for the same. -Sandeep T

sdurga · ‎02-17-2013

I assume you are migrating the config from one PAN device to another PAN. If that is the case you can set the cli output mode to set using the command "set cli config-output-format set" and print the routes on the cli in set format. You can copy all of the static routes in the set format and paste into the other device. Alternatively you can also cut and paste the routing config from the xml file to the new device xml file. Thanks, Sandeep T

sdurga · ‎02-17-2013

You can configure rules to allow/deny traffic between V-wire zones. You can also make use of other features like anti-virus filtering, url filtering, NAT and almost every other feature done by regular L3-traffic. Here are some documents that can help you with Vwire config. How to Configure Virtual Wire (VWire) Video Link : 1005 Thanks, Sandeep T

sdurga · ‎02-15-2013

The ACC and the threat logs should represent the same information. I have checked my lab device and it is working as expected as shown below. Would it be possible for you to attach a screenshot of yours ? Thanks, Sandeep T

sdurga · ‎02-15-2013

can you do a commit force once using the command "commit force" and try deleting the interface once, if it does not work I would recommend you to open a case with support for further assistance on this. Thanks, Sandeep T

sdurga · ‎02-15-2013

I believe this is what you are looking for PAN-OS Syslog Integration Please let us know if that helps. Thanks, Sandeep T

sdurga · ‎02-14-2013

Interesting, so you do not have any configuration and it still shows references !! What does the output of the show network interface show ? any references to sub-interfaces ? Thanks, Sandeep T

sdurga · ‎02-14-2013

Which software version are your running on the firewall ? also can you please give me the output of the command "show system resources" Thanks, Sandeep T

sdurga · ‎02-14-2013

I was able to delete the sub-interface even with the tag config. Did you remove the zones, IP config ? If not try to remove that as shown in this document. https://live.paloaltonetworks.com/docs/DOC-2922 Thanks, Sandeep T

Date Registered	‎12-30-2011 11:43 AM
Date Last Visited	‎10-16-2019 06:57 PM
Total Messages Posted	281
Total Likes Received	102

Online Status	Offline
Date Last Visited	‎10-16-2019 06:57 PM

Strata

Prisma

Cortex

About sdurga