This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About LCMember1959
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About LCMember1959
11-13-2019
20Posts
5Likes
3Solutions
Nov 13, 2019Last Visited
User
Activity
User
Profile
Latest posts by LCMember1959
| Subject | Views | Posted |
|---|---|---|
| 6978 | 10-27-2016 07:36 AM | |
| 1651 | 10-26-2016 06:10 AM | |
| 6989 | 10-26-2016 06:07 AM | |
| 7005 | 10-26-2016 03:42 AM | |
| 7366 | 10-26-2016 03:28 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 10-27-2016 07:36 AM | |
| 1 Like | 10-10-2016 03:52 AM | |
| 1 Like | 09-29-2016 03:12 AM | |
| 1 Like | 02-29-2016 05:20 AM | |
| 1 Like | 02-29-2016 01:18 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 14 Likes |
User Badges
Community Statistics
| Member Since | 12-03-2013 01:22 AM |
| Date Last Visited | 11-13-2019 01:01 AM |
| Posts | 20 |
| Total Likes Received | 5 |
10-27-2016
07:36 AM
1 Kudo
After talking to TAC we found that it was indeed DNS queries from BYOD clients using Sophos Live Protection. I guess we could use some kind of application override to force this traffic to be identified as DNS, but instead we will just block sophos-live-protection.
... View more
10-26-2016
06:10 AM
Our Panorama server uses a volume on iSCSI storage (Dell Equallogic) with SAS disks. Everything else on the same storage solution works very fast, so I don't think that it's a bottleneck.
... View more
10-26-2016
06:07 AM
Thanks for the feedback. I see this problem in DNS queries from our domain controllers to the DNS servers of our ISP, and neither we nor our ISP use Sophos in any way, shape or form. So I will open a TAC case on this.
... View more
10-26-2016
03:42 AM
Some of this traffic is coming from our domain controllers (to external DNS servers), and they have no Sophos installed. To my knowledge we don't use any Sophos software whatsoever in our network.
... View more
10-26-2016
03:28 AM
Some DNS traffic is classified as sophos-live-protection in our traffic logs. Has anyone else seen this? I only have logs 5 days back in time, so I cannot say when this started but it wasn't with the latest apps update. Our firewall is PA-5050 running PAN-OS 6.1.14.
... View more
10-26-2016
12:33 AM
According to our traffic logs a lot of traffic is denied during a period of 15-20 seconds every time we update applications and threats on our PA-5050. Is this normal? This is all kinds of traffic like mssql-db, web-browsing, ms-sms etc.
... View more
10-24-2016
03:04 AM
We started using Panorama a few months ago, and I see the same thing when searching through traffic logs for older entries. We use VMware and the host running Panorama has 4 vCPUs and 4 GB memory. Panorama version is 7.1.4-h2
... View more
10-10-2016
03:52 AM
1 Kudo
Device priority on the firewall in our main data center is set to 100 and the other is set to 111. Preemption is enabled. I am guessing when the passive partner booted up without network connectivity and no longer suspended it assumed that the active partner was down and made itself active. Then the interfaces were connected and we got a split brain scenario.
... View more
10-10-2016
03:11 AM
We are in the process of setting up HA between two PA-5050 running PANOS 6.1.14. After configuring everything and testing failover in our main data center we performed "Suspend local device" on the passive node and shut it down to move it to our secondary site. After it was moved there and powered on we started to connect the various interfaces. This caused a major outage in our network, and when I connected to the console port on the (presumed) suspended firewall I saw that it had gone active. Is this a bug in PAN-OS, or did we miss a step somewhere?
... View more
10-04-2016
02:50 AM
Have you tried the same rule, but with Any/Any as application and service? If Skype still does not work then I would suspect that it might be a client problem.
... View more
09-29-2016
03:12 AM
1 Kudo
There is a setting under Setup -> Management -> Logging and Reporting Settings -> Log Export and Reporting called "Enable Log on High DP Load". Select this check box if you would like a system log entry generated when the packet processing load on the firewall is at 100% CPU utilization. Disabled by default. Is that what you were thinking of? I don't know of any way you can disable logging under high DP load, but at least this will alert you in case you don't have any other monitoring of your firewall..
... View more
08-10-2016
03:00 AM
End of August Palo Alto will introduce a new URL Category: "Extremism" Websites promoting terrorism, racism, fascism or other extremist views discriminating people or groups of different ethnic backgrounds, religions or other beliefs. The default policy action for this category is "Block" Would this cover your needs?
... View more
06-20-2016
03:45 AM
You can also use tools like Cacti to pull numbers from your firewall using SNMP. That way you can see trending over time.
... View more
06-09-2016
03:04 AM
Has this been changed in recent versions? We are running 6.1.10 and have the block option in our antivirus profile.
... View more
02-29-2016
05:20 AM
1 Kudo
Support now confirms that this is a software bug and PA are working on a fix to be relased in a future version. The bug affects both PA firewalls and Panorama.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-13-2019
01:01 AM
|
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks