About jasonrakers

Anyone have some knowledge on what the reportd system process does?  Doing a "show system resources follow" from Panorama shows high utilization of this process.  I assumed reportd might be related to custom reports, we have 17 "scheduled" custom reports, but I can't find how to see when those reports are scheduled to be running. ... View more

I am testing multi vsys configurations in my lab and noticed that I am unable to use a source/destination zone of "any" in the device group security policy associated with vsys2.  The default vsys1 accepts "any" zone.  When I attempt to commit/validate to the device i get a error like the following attached.  It seems as I can only have defined zones in my security policy when using multi vsys.  This prohibits the use of our global "Shared" rules that are applied across all devices regardless of what zone.   Details: .   vsys2 (vsys2) .   Error: Rulebase 'security' .   'any' zone is invalid from rule 'threat' .   Error: Failed to parse security policy .   (Module: device) .   Configuration is invalid   I am using 8.1.10.   Has any one encountered this? ... View more

Has anyone encountered this problem?  I have noticed since upgrading Panorama to 8.1.7 that two of my API commits no longer work: log collector and forced template stack.  I get the following message from Panorama: <response status="success" code="19"> <msg>There are no changes to commit.</msg> </response>   However, there are outstanding changes, and I am able to commit them manually through the GUI.   API calls being used: Log Collector commit - <commit-all><log-collector-config><log-collector-group>$LC-group</log-collector-group></log-collector-config></commit-all>     Force template stack commit - <commit-all> <template-stack> <name>stack_ {{$TEMP-NAME}} </name> <device> <member> {{$serialnum}} </member> </device> <merge-with-candidate-cfg>no</merge-with-candidate-cfg> <force-template-values>yes</force-template-values> </template-stack> </commit-all>     I am going to try downgrading my Panorama install in my lab to test again.  The last time i remember i ran these calls successfully was on 8.1.5.     ... View more

Does any one know if there is an XML API call to add a new firewall to an existing Log Collector group, without needing to specify all the existing members of the LC group?   For instance...here is the XML debug when adding a new firewall to an existing group.  Unfortunately, I need to include all of the other firewalls as well.     <request cmd="op"  target="panorama"> <operations xml="yes"> <set> <log-collector-group-preference-list> <log-collector-group>GROUP</log-collector-group> <collector-preference-list> <entry> <devices> <entry name="existing1"/> ... <entry name="existingN"/> <entry name="newFW"/> </devices> <collectors> <entry name="1"/> <entry name="2"/> </collectors> </entry> </collector-preference-list> </log-collector-group-preference-list> </set> ... View more