This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About branedge
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About branedge
09-22-2023
17Posts
0Likes
0Solutions
Sep 22, 2023Last Visited
User
Activity
User
Profile
Latest posts by branedge
| Subject | Views | Posted |
|---|---|---|
| 131 | 08-18-2023 07:00 AM | |
| 264 | 08-11-2023 07:41 AM | |
| 339 | 08-11-2023 06:36 AM | |
| 494 | 08-10-2023 10:38 AM | |
| 565 | 07-06-2023 09:04 AM | |
| 671 | 07-03-2023 06:30 PM | |
| 765 | 07-03-2023 09:17 AM | |
| 813 | 07-03-2023 07:17 AM | |
| 890 | 07-03-2023 05:32 AM | |
| 909 | 07-03-2023 05:14 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 10-27-2022 07:54 AM |
| Date Last Visited | 09-22-2023 10:16 AM |
| Posts | 17 |
08-18-2023
07:00 AM
sorry this has taken so long for a response. and thanks for the info, it appears that we were having issues with our content filter, just so happens that they started having issues the same time we put the palo in place.
... View more
08-11-2023
07:41 AM
we have a new PA been in line about a week, i had to take it out today and replace it with my old barracuda firewall because of slow page loads. For example going to speedtest.net it may take 45sec to a minute for the page to load where i can initiate a test, but once it loads i get my expected speeds (about 850MB up/down). This is the same for about all pages it seems very slow to get the page loaded but fine afterwards, some pages time out and you have to refresh to load.
data plane cpu on firewall is 18%
i have opened a ticket with support they (so far) haven't seen any issues - problem goes away when palo not in line.
We have 2 ISP, i'm using ECMP, IP Modulo, routing is down via ospf.
Any ideas where i can start looking?
... View more
08-10-2023
10:38 AM
just setup GlobalProtect, when anyone connects to the vpn, they are able to access my company resources (file shares, remote server connections, etc) but they lose their internet connection. i have noticed that we are not getting a gateway assigned once we connect, i feel like that's the issue but i I can't figure out how to resolve this.
I just connected via VPN and noticed under advanced logging settings, network configuration IP Routing Enabled says No, also under connections Bytes In is 0
... View more
07-06-2023
09:04 AM
i have it working now, thanks for all your help, to be honest i changes several things throughout this process so not sure exactly what was the final fix. But i did have some PBF rules that i think were causing the issue, I removed them and added a second nat rule for my secondary isp (i believe that was also missing) but it's working now!
... View more
07-03-2023
06:30 PM
i am seeing traffic coming in on the isp2 interface, I'm temporarily allowing ping on the ip of the isp2 interface an i can ping that, i haven't tried pinging the next hop address (i will soon as i can).
i have static routing set up for both my ISPs (virtual router, static routes) - I'm not sure about the prefixes for the ISPs, how do i check this?
the address are in a /26 and the wan interface is set up as a /26 so it resides in the same range
... View more
07-03-2023
09:17 AM
symmetric return is on and per support i have ran packet captures from an external pc to my app (sharepoint) that's not working, and the packet capture looks too show a no response
... View more
07-03-2023
07:17 AM
I essentially have 2 ISPs (for load balancing or backup if one fails)
both isp directly connected to palo.
some applications tied via DNS to one isp (168.x.x.x. (primary)) others tied to secondary 207.x.x.x and are then NATed into my private ip range
seems everything works on the 168 side but not working on the 207 side, palo support said there wasn't a route set up to 207. but in my default virtual router both isp are setup (static routes). i'll provide more details if you need/want
... View more
07-03-2023
05:32 AM
that's what i thought, but had support trying to have me add a second virtual router for my 2nd isp, I'm having routing issues to one of my servers on my secondary isp.
... View more
07-03-2023
05:14 AM
if i have 2 isps, same bandwidth, used for load balancing with ECMP do i need 1 or 2 virtual routers?
... View more
06-30-2023
04:49 AM
I have disabled my PBF rules for now.
The Interzone-default policy did not have logging on (had to override it) but i turned it on for "log at session start" only. Should this stay on?
I have Symmetric Return enabled in ECMP but not Strict Source Path
Basic Layout
...not real info...
public dns record
app1.publicdomain.com 168.x.x.x
app2.publicdomain.com 207.x.x.x
Internal NAT
app1.local.com 172.3.3.5
app2.local.com 172.3.3.10
onsite app1 and app2 work
offsite app1 works but not app2
i have 2 zones (zone168 and zone 207) - 2 physical connections
NAT policy
Security policy
... View more
06-29-2023
05:11 AM
So may be a 2-part question. First, we have 2 ISPs both equal bandwidth so I've setup ECMP using IP Modulo do i need to set up PBF, or is that if you don't have equal ISPs?
2nd and the real issue. One of my applications that is tided via public dns to my secondary isp can't be reached. I've set up NAT and Security policy to it (i think correctly) but when i monitor the traffic i never see it attempt to hit it. this is a new firewall so wondering if issue with route setup? any advice would be appreciated.
... View more
03-03-2023
05:39 AM
we have 2 new 5410 that I'm trying to set up for active/active. we have 2 ISPs a single physical content filter and a single core switch. I know there will be some fail point with the single core and content filter. my question is so i need to wire my 2nd palo to my 2 isp switches and then to my core I've attached a picture, hopefully this will make it clearer.
thanks
... View more
02-24-2023
11:42 AM
thanks, i opened a ticket and have been getting the run around for 2 days now!
... View more
02-24-2023
11:28 AM
just purchased 2 PA-5410s and stumbled across eve-ng, do i have to have a license to be able to download the pan-os to run in eve-ng?
thanks
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-22-2023
10:16 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks