This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About dan731028
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About dan731028
06-21-2022
54Posts
3Likes
1Solution
Jun 21, 2022Last Visited
User
Activity
User
Profile
Latest posts by dan731028
| Subject | Views | Posted |
|---|---|---|
| 1259 | 02-08-2021 12:23 PM | |
| 1437 | 12-02-2020 07:33 PM | |
| 1481 | 12-02-2020 04:58 PM | |
| 1800 | 06-18-2019 09:15 AM | |
| 1903 | 06-13-2019 09:35 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 12-02-2020 04:58 PM | |
| 1 Like | 10-03-2018 02:14 PM | |
| 1 Like | 10-24-2015 07:34 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 06-23-2013 06:18 PM |
| Date Last Visited | 06-21-2022 06:20 PM |
| Posts | 54 |
| Total Likes Received | 3 |
02-08-2021
12:23 PM
It turned out to be an issue with the optics being used in the log forwarding port. Once we used a supported optic, everything worked as expected.
... View more
12-02-2020
07:33 PM
Thanks for the suggestion. In PAN-OS 9.0 I don't have an option to turn on high speed log forwarding. I did enable send to all collectors in the preference list, but that didn't seem to change anything.
... View more
12-02-2020
04:58 PM
1 Kudo
Hey everybody, I'm setting up a 7050 with a log forwarding card to a dedicated log collector. On the log collector, I have it set to device log collection and collector group communication on ethernet1/5. I have log settings configured as well as a log forwarding profile. With traffic running through the firewall, I'm seeing hits against rules on the 7050, but when I run "show logging-status device <SERIAL>" I see the destination IP of ethernet1/5, and I'm seeing logs received for system and config, but I'm not getting any traffic logs. In the panorama manager, I can see the system and config logs, but I'm not seeing any traffic logs. Any ideas what could be the issue?
... View more
06-18-2019
09:15 AM
Thanks Remo. This is what I thought. Thanks for the verification.
... View more
06-13-2019
09:35 AM
Hi All, When you enable OCSP and CRL revocation checking on the firewall, if a certificate is revoked the default behavior is to block the connection. Is there any way to change that behavior so that maybe the revoked log is written in the system log, but still allow the browser to connect through. I was hoping it would be as simple as allowing connections with timeout or status unknown, but doesn't appear to be the case. We're trying to get an idea of impact on our environment before we just outright block these connections. Thanks in advance!
... View more
10-03-2018
02:14 PM
1 Kudo
Update: I noticed in the passive firewall, I could assign the IP address of HA1-B as a source IP and ping the remote IP of the active firewall. That ping failed. On the active box, when I tried to source the IP address of the HA1-backup it said address could not be assigned. I changed the IP, committed, changed it back to the same IP it was configured at previously, committed again, and HA1-Backup is now active. The HA configuration had been committed, so I didn't forget to commit the first time around. The firewalls have been up and passing traffic, so I know that IP was correct. I'll see how long it stays active and post if anything changes, but it seems like something weird is going on in 8.1.
... View more
10-03-2018
01:50 PM
I've been doing some tinkering with a pair of 3220s and am noticing that in the GUI it's reporting HA1 Backup is down in the HA widget of the dashboard if I use the HA1-B port. HA1-A is up, and if I use the management port for HA1-Backup, it comes up fine. I configured HA1-B the same as HA1-A, only using a different /30 network. I've tried different cables, and the firewalls are both directly connected. The activity lights show up on both HA1-A and HA1-B, and if I look at the ports in the firewall CLI they both show 1000/full/up. Is there something different that has to be configured with HA1-B to get this to work? I'm assuming there's no known bug as I didn't see anything in the release notes. Anyone else run into this?
... View more
09-06-2018
02:10 PM
@BPry Thanks. That's kind of what I figured was going on, but was just curious. Thanks for the info.
... View more
09-06-2018
02:03 PM
Hello Community. I noticed yesterday with the release of the September update that now inside the traps cloud management console, I get random notices that I "don't have permission to take this action. Contact your systems administrator." I can continue the actions I'm trying to do, but as a super user, I'm not sure why I'm seeing these. I thought maybe something was screwy with our instance, but I installed a new instance today at a customer site and I saw the same behavior. In both instances, we were logged into these as a superuser. Sometimes I'd get the message when I went to the policy tab, sometimes it wouldn't show until we tried to create a policy, and sometimes it wouldn't show until we tried to save a policy. The same kind of random message happens in other tabs as well. Anyone else experiencing this since the update?
... View more
06-21-2018
05:34 AM
Hello All. I set up the directory service for the first time yesterday. Everything works, but I noticed the certificate I have to create is only valid for 3 months. Do i have to renew it every 3 months?
... View more
09-20-2017
02:08 PM
Thanks for the confirmation!
... View more
09-20-2017
12:49 PM
Thanks for the reply. Would there be a reason not to enable IPv6 on the tunnel interface? If GP isn't using IPv6 for client IPs, I don't see how it could affect anything.
... View more
09-20-2017
12:09 PM
Hello All, I just upgraded to 8.0.4 and now when I commit the tunnel interface associated with my external GP gateway gives a warning that "ipv6 is not enabled on the tunnel interface tunnel.1. IPv6 address will be ignored!" Did something change in the gateway configuration. I've gone over and over a few times and am not finding a reference to IPv6 anywhere. It's set to use IPv4 Only. If I remove the tunnel interface from the gateway config or I enable IPv6 on the tunnel interface, the warning goes away. Is there a setting I need to change or could this be an issue with 8.0.4?
... View more
06-12-2017
08:50 AM
Hi @Willian I do have a certificate chain for GlobalProtect as we're using a wildcard certificate for that, and the two that are presenting the error do have the certificate chain installed. I'm not getting any error messages when I commit on the firewalls themselves that the certificate chain is incorrect or anything and the certificates are nested as expected in Panorama and the firewalls in Device>Certificates. I've double-checked the chain and I do have the correct ones installed. Would it be worth removing and re-adding the chain?
... View more
06-12-2017
07:28 AM
I've set up my first LSVPN deployment and everything has gone without a hitch. The only issue I ran into, we were doing an upgrade of PAN-OS on the gateway and satellites. Satellites all went fine, but my gateway bombed out (first time its happened to me). We were in an HA pair, but I had duplicate IPs on the network once the passive box rebooted, but I could never communicate or pass traffic with the passive box. Once I got the bad actor off the network and replaced with an on-site spare and the environment back up and stable, the Satellites didn't reconnect. It took upwards of 45 minutes to get them back online. It appears once the tunnel goes down on the satellite there's no way to recover until the next portal or gateway check-in. I was in process to manually reconnect the firewalls, but they came up while I was en route. So, I've read the tunnel monitor difference between IPSEC and LSVPN and looked over the LSVPN deployment guide, but I guess I'm missing how the satellites will recover if connectivity to the gateway is lost. Currently, I don't have a tunnel monitor set up on the Gateway. Should I change this monitor to the physical IP of the gateway instead of letting the monitor default to the tunnel interface of the gateway? Would this improve recovery time? Thanks for any help!
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-21-2022
06:20 PM
|
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks