This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About pauloraponi
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About pauloraponi
10-11-2017
8Posts
5Likes
0Solutions
Oct 11, 2017Last Visited
User
Activity
User
Profile
Latest posts by pauloraponi
| Subject | Views | Posted |
|---|---|---|
| 2699 | 07-28-2017 01:09 PM | |
| 2847 | 07-20-2017 06:09 AM | |
| 2907 | 07-18-2017 12:09 PM | |
| 2016 | 05-23-2017 06:38 AM | |
| 4778 | 05-14-2017 02:59 PM | |
| 5104 | 05-13-2017 06:28 AM | |
| 3735 | 05-08-2017 01:47 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 Likes | 05-14-2017 02:59 PM | |
| 2 Likes | 05-13-2017 06:28 AM | |
| 1 Like | 05-08-2017 01:47 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 2 Likes |
User Badges
Community Statistics
| Member Since | 08-12-2015 10:10 AM |
| Date Last Visited | 10-11-2017 10:30 AM |
| Posts | 8 |
| Total Likes Received | 5 |
07-28-2017
01:09 PM
Hi, Go to an Endpoint that did not receive the update, open the Console and click in "Open Log File...." It will show to you the error. Regards, Paulo Raponi
... View more
07-20-2017
06:09 AM
@pkowalewski PA 5020 is a connected to panorama ? What is device state ? - Is Connected status When we deploy Panorama 7.1.x the logs works. When we deploy Panorama 8.x in legacy mode the logs works When we deploy Panorama 8.x in the new "Panorama mode" the logs not works @BPry Do your content versions match on Panorama and the 5020? My initial guess would be that they don't and that is why you are seeing these errors. You would want your Panorama to match your content releases or be a lower release than your firewalls, if your Panorama has a higher content version then you will get random issues like this when attempting to collect those logs. Content version are the same in both devices. @Remo On what panorama version are you exactly? Did you do a simple reboot? Did you check the disk status? Did you try to remove and add the disks again to your local log collector? (Do not try this when you still have logs on that log collector, may be from migrating to panorama mode, but since you wrote that you deploy a new panorama...) Did you delete and add the local log collector? - Panorama 8.0.2 fresh install - The reboot did not fix the problem - Disk status: # show system disk-space Filesystem - Size - Used - Avail - Use% - Mounted on /dev/sda2 - 8.0G - 2.3G - 5.3G - 30% - / /dev/sda5 - 24G - 1.5G - 22G - 7% - /opt/pancfg /dev/sda6 - 6.0G - 1.6G - 4.2G - 28% - /opt/panrepo tmpfs - 7.9G - 110M - 7.8G - 2% - /dev/shm cgroup_root - 7.9G - 0 - 7.9G - 0% - /cgroup /dev/sda8 - 32G - 11G - 20G - 35% - /opt/panlogs /dev/sdb1 - 2.1T - 68M - 2.1T - 1% - /opt/panlogs/ld1 /dev/loop0 - 9.9G - 151M - 9.2G - 2% - /opt/logbuffer - I'm not migrating from legacy to panorama mode. I install it from scratch on 8.0.2 with all pre-requisits for Panorama Mode.
... View more
07-18-2017
12:09 PM
Hi, We are deploying a new Panorama 8 VM (in Panorama mode) and configured it to receive log from a PA-5020 running PA 7.0.11. The Panorama GUI not show any log. I've debugged it in CLI: > tail follow yes mp-log logd.log 2017-07-18 16:05:36.213 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.214 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.214 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.214 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.215 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.215 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.215 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.216 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.216 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.216 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.217 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.217 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.217 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.218 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.218 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.218 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.219 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.219 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 2017-07-18 16:05:36.220 -0300 Error: pan_collect_log_stats(pan_log_handler.c:5704): Invalid record type 20 ... Is there any additional configuration that needs to be done? There's other debug commands that can help me? Regards, Paulo R.
... View more
- Tags:
- panorama
05-23-2017
06:38 AM
Is your IIS BitsUploads configured? Agent use it to send Wildfire samples to ESM. Regards, Paulo Raponi
... View more
05-14-2017
02:59 PM
2 Kudos
I've tested with all ESM default policies. I'm disabled my VM (agent) communication with external network. So, Traps are blocking WannaCry using Local Analisys.
... View more
05-13-2017
06:28 AM
2 Kudos
Hi Guys, I've tried Traps 4.0 with default policies and content 14 in a Windows 7 VM and WannaCry .exe sample Traps blocks successfully WannaCry even without ESM Comunication (without Wildfire, in this case) ! So, all Traps customer are safe by default. Regards, Paulo Raponi
... View more
05-08-2017
01:47 PM
1 Kudo
Hello Guys, Based on your experience, what would be the best policy for detect/blocking Ransomware? Can you give some examples? I'm using version 4.0 Regards, Paulo R.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-11-2017
10:30 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks