Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About LCMember1959
About LCMember1959
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
11-13-2019
20Posts
5Likes
3Solutions
Nov 13, 2019Last Visited
User
Activity
User
Profile
Latest posts by LCMember1959
| Subject | Views | Posted |
|---|---|---|
| 2431 | 10-27-2016 07:36 AM | |
| 459 | 10-26-2016 06:10 AM | |
| 2442 | 10-26-2016 06:07 AM | |
| 2458 | 10-26-2016 03:42 AM | |
| 2462 | 10-26-2016 03:28 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 10-27-2016 07:36 AM | |
| 1 | 10-10-2016 03:52 AM | |
| 1 | 09-29-2016 03:12 AM | |
| 1 | 02-29-2016 05:20 AM | |
| 1 | 02-29-2016 01:18 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 14 |
User Badges
Public Statistics
| Date Registered | 12-03-2013 01:22 AM |
| Date Last Visited | 11-13-2019 01:01 AM |
| Total Messages Posted | 20 |
| Total Likes Received | 5 |
10-27-2016
07:36 AM
1 Kudo
After talking to TAC we found that it was indeed DNS queries from BYOD clients using Sophos Live Protection. I guess we could use some kind of application override to force this traffic to be identified as DNS, but instead we will just block sophos-live-protection.
... View more
10-26-2016
06:10 AM
Our Panorama server uses a volume on iSCSI storage (Dell Equallogic) with SAS disks. Everything else on the same storage solution works very fast, so I don't think that it's a bottleneck.
... View more
10-26-2016
06:07 AM
Thanks for the feedback. I see this problem in DNS queries from our domain controllers to the DNS servers of our ISP, and neither we nor our ISP use Sophos in any way, shape or form. So I will open a TAC case on this.
... View more
10-26-2016
03:42 AM
Some of this traffic is coming from our domain controllers (to external DNS servers), and they have no Sophos installed. To my knowledge we don't use any Sophos software whatsoever in our network.
... View more
10-26-2016
03:28 AM
Some DNS traffic is classified as sophos-live-protection in our traffic logs. Has anyone else seen this? I only have logs 5 days back in time, so I cannot say when this started but it wasn't with the latest apps update. Our firewall is PA-5050 running PAN-OS 6.1.14.
... View more
10-26-2016
12:33 AM
According to our traffic logs a lot of traffic is denied during a period of 15-20 seconds every time we update applications and threats on our PA-5050. Is this normal? This is all kinds of traffic like mssql-db, web-browsing, ms-sms etc.
... View more
10-24-2016
03:04 AM
We started using Panorama a few months ago, and I see the same thing when searching through traffic logs for older entries. We use VMware and the host running Panorama has 4 vCPUs and 4 GB memory. Panorama version is 7.1.4-h2
... View more
10-10-2016
03:52 AM
1 Kudo
Device priority on the firewall in our main data center is set to 100 and the other is set to 111. Preemption is enabled. I am guessing when the passive partner booted up without network connectivity and no longer suspended it assumed that the active partner was down and made itself active. Then the interfaces were connected and we got a split brain scenario.
... View more
10-10-2016
03:11 AM
We are in the process of setting up HA between two PA-5050 running PANOS 6.1.14. After configuring everything and testing failover in our main data center we performed "Suspend local device" on the passive node and shut it down to move it to our secondary site. After it was moved there and powered on we started to connect the various interfaces. This caused a major outage in our network, and when I connected to the console port on the (presumed) suspended firewall I saw that it had gone active. Is this a bug in PAN-OS, or did we miss a step somewhere?
... View more
10-04-2016
02:50 AM
Have you tried the same rule, but with Any/Any as application and service? If Skype still does not work then I would suspect that it might be a client problem.
... View more
09-29-2016
03:12 AM
1 Kudo
There is a setting under Setup -> Management -> Logging and Reporting Settings -> Log Export and Reporting called "Enable Log on High DP Load". Select this check box if you would like a system log entry generated when the packet processing load on the firewall is at 100% CPU utilization. Disabled by default. Is that what you were thinking of? I don't know of any way you can disable logging under high DP load, but at least this will alert you in case you don't have any other monitoring of your firewall..
... View more
08-10-2016
03:00 AM
End of August Palo Alto will introduce a new URL Category: "Extremism" Websites promoting terrorism, racism, fascism or other extremist views discriminating people or groups of different ethnic backgrounds, religions or other beliefs. The default policy action for this category is "Block" Would this cover your needs?
... View more
06-20-2016
03:45 AM
You can also use tools like Cacti to pull numbers from your firewall using SNMP. That way you can see trending over time.
... View more
06-09-2016
03:04 AM
Has this been changed in recent versions? We are running 6.1.10 and have the block option in our antivirus profile.
... View more
02-29-2016
05:20 AM
1 Kudo
Support now confirms that this is a software bug and PA are working on a fix to be relased in a future version. The bug affects both PA firewalls and Panorama.
... View more
02-29-2016
01:18 AM
1 Kudo
We have the same problem. Both PA-5050 and Panorama. Old software versions are also gone, or rather not listed as downloaded. I have opened a case with support.
... View more
10-06-2015
06:02 AM
If you are using a controller-based wireless network then you can use some form of onboarding to push the necessary certificate to all clients.
... View more
09-09-2015
05:59 AM
Here is the link for PA integration with ClearPass 6.x: https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=17560
... View more
08-31-2015
01:06 AM
Thanks for the feedback to all of you. I will try out for Splunk for a while.
... View more
08-28-2015
04:47 AM
Hi. We have a PA-5050 running PAN-OS 6.1.5. With the limited disk space we currently only get about 4-5 days worth of traffic log before it starts overwriting older events. We would like to increase this period to at least 6 months. One solution would be to setup Panorama which as a virtual appliance presumably would have unlimited disk space available for logging, but since we only have one PA firewall it would be a bit overkill for us. Another solution that has been suggested to us is to use Splunk and their PA app and forward all logs from the PA-5050 to Splunk. My concern here would be if the user interface in Splunk is very different from what the Monitor tab on the PA-5050 shows us. Does anyone here use the Splunk solution and have any feedback how easy it is to use in everyday monitoring and troubleshooting compared to the bultin log viewer in the PA mgmt GUI? Are there any other systems out there than Panorama and Splunk in use?
... View more
- Tags:
- logging
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-13-2019
01:01 AM
|
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
