About craymond

I was not able to find that. This is solarwinds SCP on a windows server. Do you know what the issue is? (i.e. why only Linux) ... View more

Here is a document that gives a little detail: Using the Proto Filter in Packet Capture ... View more

You can also use !( dstloc eq US ) and !( srcloc eq US ); the "!" = false in Boolean expression. An exclamation point can be used whenever you want to switch between equals or does not equal (true or false). ... View more

I think you need to readmit the questions that you need answered. If all you want to know is if the PAN can be used as the L3 Gateway for your VLANs, the answer is yes. Using the PAN for several VLANs as their gateway,  and create security zones between VLAN segments is a very simple setup: 1. Add  L3 "sub-interface" on the PAN in Network 2. Assign it the interface and assign a tag 3. Give it an ip address the the VLAN will be using as a gateway 4. Assign it a zone 5. create your policies If you are asking how would create a setup like VRRP, I believe you are asking about how to do an HA Active/Active setup, or if you are asking if VRRP works with PAN firewalls, I don't think it will. If you are trying to achieve redundancy between 2 switches and the PAN, you might look at LAG/MLAG between the switches and the PAN firewall. ... View more

Creating a custom app is actually fairly simple to do, it is just a little hard to understand . There is a simple way, and a more complex way. The complex way is a much more useful tool. The simple way is to create a custom app by clicking add in application objects, give it a name and then check the box marked Continue scanning for other Applications . Then click on policies tab and select application override. Click add and name it, give it a source and destination, and the port(s) that it uses, select the custom application that you created and presto you have that unknown-tcp or unknown-upd traffic show in the logs as your custom app. The more complex method entails actually packet capturing the traffic and creating a signature based on that traffic. The document that sraghunandan, posted: https://live.paloaltonetworks.com/docs/DOC-2015 does a far better job of explaining that I could. For non-http traffic, I have used unknown-req-tcp-payload, and hex string matches, with defined ports. Just remember the \x at the beginning and the end! ... View more

Well using the custom report under the sub-directory custom report did not work. It actually just comes up as a blank page. ... View more

Ha! I didn't even notice that. I will try that and see if it works. What is strange is that it was working fine until we upgraded to to 4.1.13. ... View more

Sorry if I was unclear. You can create custom reports. You can create a report group that has your custom reports contained within it. You can schedule to have that report group sent via email. The problem I am having is that the report group that is emailed containing the custom reports that I have created does not look like, is not formatted and filtered the same as if I just run the custom report under manage custom reports. For instance, when I run one of the custom reports from manage custom reports in which I have configured it to show only specific zones, specific IP Ranges, and other specifics, and have configured it to sort and show only top 10, the report shows 10 rows and all of the information that I configured.... But, when I get the Daily report group sent to me, that same custom report that is included in the group report does not contain the information as I have defined it, and contains hundreds of rows instead of just the top 10 as I have configured. ... View more