This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About NetOverLord
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About NetOverLord
10-02-2019
9Posts
0Likes
1Solution
Oct 02, 2019Last Visited
User
Activity
User
Profile
Latest posts by NetOverLord
| Subject | Views | Posted |
|---|---|---|
| 1347 | 02-15-2019 02:23 PM | |
| 1362 | 02-04-2019 03:09 PM | |
| 3089 | 02-04-2019 06:15 AM | |
| 3180 | 02-01-2019 02:44 PM | |
| 3263 | 10-18-2018 07:16 AM | |
| 3267 | 08-07-2018 11:57 AM | |
| 1335 | 07-12-2018 02:52 PM |
User Badges
Community Statistics
| Member Since | 07-06-2015 01:43 PM |
| Date Last Visited | 10-02-2019 09:26 AM |
| Posts | 9 |
02-15-2019
02:23 PM
Hello out there, Kind of surprising not to see any comments or feedbackson this topic, as my exprience has always been otherwise. But for all it's worth I am responsding to my own comments as I was able to find some answers as to why the VM (VM-100) FW breaks as more vNIC are added. By applying the following solution I was able to resolve the issue I was facing on my PAN VM-100. All VM-series firewalls do require vmxnet3 type vNIC. By default when a vNIC is added to the VM-100 (or to All VM-series firewalls for that matter) VMware Worksatation by adds the vNIC as e1000 (I believe this Intel and not VMware propietory NIC). So to resolve this issue, xxxx.vmx file (where xxxx respresnt the name of the VM you have selected when the VM was built) needs to be opened in notepad. All references, in case mulitple vNICs were added, to "e1000" need to be replaced by "vmxnet3". After the file, is saved, (better power off the VM before you make this chage), the VM can be powered back on, the boot process should complete, and the log on prompt should be presented at the CLI. This is also a good article from PAN itself, describing the requirments of the VM-series: https://docs.paloaltonetworks.com/vm-series/7-1/vm-series-deployment/set-up-a-vm-series-firewall-on-an-esxi-server/vm-series-on-esxi-system-requirements-and-limitations Cheers Lord
... View more
02-04-2019
03:09 PM
Hi there, I have no issues spining up new VM-100s in my VMware Workstation 15.0.2, however, when I try to add a third vNIC to the VM, the VM will not boot any longer. I get an error on the CLI (VM console) indicating that the configuration is not supported and I have to connected PAN support. Anyone have tried this and perhaps come across the same issue? (the vNIC I'm adding is of type VMnetx (where x is the number of VMnet costume: specific virtual network). Any feedback or comment is appreciated. Sam
... View more
02-04-2019
06:15 AM
@Mick.BallThank you for your suggestion. I don't why I did not think of the sending the Putty output to text file before I posted my question. Simple enough. With regards to using API, I have used API for other reasons, but to interface with the FW and pull output of commands, I will have to research further. Thank you. Sam
... View more
02-01-2019
02:44 PM
Hi there, Can I send (print) output of a command to a csv file? (PA500, software: 8.1.4) For example the following command lists the users of the AD and disaplys on the screen. I need a switch/parameter or perhaps another command that lets me send the output (the list of the users) to a text or a csv file. Is that possible? Example of the command: show user group name "the name of the AD group" Thanks
... View more
10-18-2018
07:16 AM
Thanks BPry. Makes sense.
... View more
08-07-2018
11:57 AM
Hello, I'm on version 8.1.2, in ACC tab I do have a User Activity "widget" or pane that shows Source User, Destination User, Bytes, Sessions, Threats, Content, URLs and Apps. Always the Source User, presents "None" for Source User and also I see "None" for the Destination User with the most number bytes sent (or could be received). I do have valid user names (such as jdoe) for Destination User but: 1) Why do I see Source User reported as None (and not a valid user name)? 2) Why the the first (the entit with thight transfered bytes) Destination Users is alwasy reported as None? Thanks for taking a shot at answering these questions (in advance).
... View more
07-12-2018
02:52 PM
Hi, I have a question in reference to the LDAP interval time. Specifically what my goal is I want to be able to let the firewall know about my AD group membership changes quicker. For example if I have a specific AD group that is configured on the fw to control a specific PBF rule, when I add or remove a domain account from that AD group, what is the default refresh time (same as interval time?) that I need to wait for the fw to scan the AD group to get the update? I usually run two commands to make the change immediate: a. debug user-id refresh group-mapping all b. debug user-id reset group-mapping all I do understand that decreasing the refresh time (interval time? LOL!) might cause bugging down the CPU on the fw and it might cause more network bandwidth utilization but I just wanted to undersatnd: 1. where can I change the refresh time? Is that located in: Device -> User Identification -> Group Mapping Settigns -> Server Porofie tab ("Update Interval" field)? 2. If I am incorrect in assuming that the Update Interval time field (above) is responsible for AD updates, what is the correct setting and where can I change it? Thank you.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-02-2019
09:26 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks