About secomike

Try not closing the commit window until it reaches 100%, if you do the commit will still be "on", at least that's what I've seen on our 5050-boxes with 4.1.4. ... View more

Stupid question perhaps and a tad off topic but is there any cost attached with requesting a custom app/signature? Or will any new app eventually be included in the standard application db (provided it's accepted as a new app)? ... View more

Hi We use OID 1.3.6.1.2.1.25.3.3.1.2.2 in PRTG and it looks accurate (on our 5050's). There's a document somewhere in the Documents section where Palo describe what can be monitored using SNMP but if memory serves me correctly not all of them worked.. Hope it works! Mike ... View more

Just updating my own case here.. Now, after hours of waiting the new block page suddenly showed up, almost as if the update was done on a schedule rather than on demand. ... View more

Good thinking, thanks for you effort mikand. However, the primary remains primary, just uploading a response page and committing doesn't fail over to the backup. I also verified that the backup device was in sync with the primary before testing. I've tried multiple browsers, emptied browser cache, used new machines..they all display the same, incorrect block page. Oddly enough, if I export the custom block page from the device it's the correct one, but the page that's shown when testing (I'm using the malware test file from eicar.org) it's still the wrong one. Unfortunately I can't reboot the device as the HA pair is unpatched, but I have tried rebooting both web and management server without luck.. Argh! ... View more

Aye, after each restore default as well as after each upload (which is confirmed by the "upload succesful" or similar). No warnings or anything, the commit which is succesful is followed by a config sync to the HA pair (we have an active-passive setup) so all really looks as it would after any other config change. ... View more