This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About cburke
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About cburke
07-26-2016
6Posts
0Likes
0Solutions
Jul 26, 2016Last Visited
User
Activity
User
Profile
Latest posts by cburke
| Subject | Views | Posted |
|---|---|---|
| 3751 | 03-21-2016 12:41 PM | |
| 3787 | 03-17-2016 12:54 PM | |
| 3944 | 03-17-2016 12:21 PM | |
| 4040 | 03-17-2016 09:45 AM | |
| 2772 | 03-14-2016 10:58 AM | |
| 2836 | 03-14-2016 09:57 AM |
User Badges
Community Statistics
| Member Since | 01-13-2016 10:30 AM |
| Date Last Visited | 07-26-2016 12:10 PM |
| Posts | 6 |
03-21-2016
12:41 PM
Ok, that makes more sense. So, really more of a procedure than something we can configure. The API call outs are interesting and what we were hoping to avoid, but this is super helpful.
... View more
03-17-2016
12:54 PM
Seemingly not. That was the first thing I tried. On my primary ISP I ping 2 separate external polling IPs. If both external polling IPs fail pings (both rules have "Disable this rule if next hop is unreachable" checked), the firewall fails over to the other ISP as expected. This all works perfectly. However, as soon as either external IP comes back up, it fails back automatically. We want to prevent the fail back behavior. Thanks!
... View more
03-17-2016
09:45 AM
Is there a way to force PBF rules to have to be manually failved back? As it is now, if our primary ISP fails, we failover to a secondary ISP using PBF. However, once the primary is back up, things fail back to it immediately. We would like to prevent the immediate fail back and not use a timer. ISP recoveries often times flap for a period of time, so we just want to wait it out until the failed ISP is deemed stable and manually fail back. Ideas? Thanks!
... View more
03-14-2016
10:58 AM
I understand that, but what if I want to say that multiple addresses must fail pings in order for a PBF rule to trigger?
... View more
03-14-2016
09:57 AM
We would like to configure PBF to failover when several conditions are met. For instance, if we can't ping our next hop AND we can't ping some public server(s). The idea being, while our next hop might be pingable, there may be a routing issue in the ISP. Therefore, you want to know to if you should failover based on remote beacons. However, we don't want to base failover on just a single remote beacon as Google has bad days too. Is there any way to do this?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
07-26-2016
12:10 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks