About GV27

Hi all, Does anyone have experience feeding NTop via NetFlow from their PA firewalls? I have it setup and sending flows but NTop sees all of the received flows as either "Flows with zero byte count" or "Flows with zero packet count" and discards them. Perhaps someone knows a fix for this? Thanks, Chris ... View more

Hi all, I'm trying to setup automatic config backups via the API per this article: https://live.paloaltonetworks.com/docs/DOC-1714 I use a command like this to get my key: https://pan-firewall.example.com/esp/restapi.esp?type=keygen&user=jmesser&password=notmypassword And then use the key in this command to get the config: https://pan-firewall.example.com/esp/restapi.esp?type=config&action=show&key=abcde-random-bunch-of-letters-abcde I have superuser permissions and these commands work great in my browser. I've tested both Chrome and Firefox. I get the key no problem and the config comes up without issue. Slick. But what I can't figure out is that when I use cURL or wget instead of the browser I get a 403 "User not authorized to perform this operation" error. The command I use is simply: curl --insecure <the_URLs_above> Anybody know why the browser would work but not cURL? I just can't think why they would be different. Thanks, Chris ... View more

Hi, I'm trying to customize my GlobalProtect Portal Login Page. I figured a good way to start would be to export the default page from the PA, modify it, then re-import it. I started out kinda complicated, but for troubleshooting purposes I've just changed a single letter in the page (instead of saying "Palo Alto Networks" it now says "Pallo Alto Networks"). But when I set the modified page to be the custom login page for GlobalProtect, I don't get my page but rather just the name and password input fields and the login button. Thanks, Chris ... View more

Hi all, I'm working for a new company building out several new data centers. They got a jump on getting things up and running before hiring their own resource and had a consultant setup a couple of pairs of PA-2050s. They are active/passive. The consultant set up the HA interfaces with no IP addresses. Is this an OK configuration? They seem happy, but every guide I've looked at - and the training I attended - all show addresses on the interfaces. Are there any drawbacks to not having addresses on the interfaces? Thanks, Chris ... View more