Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About dtran
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About dtran
Online
47Posts
5Likes
0Solutions
Jun 21, 2021Last Visited
User
Activity
User
Profile
Latest posts by dtran
| Subject | Views | Posted |
|---|---|---|
| 61 | Saturday | |
| 62 | Saturday | |
| 262 | Thursday | |
| 281 | Thursday | |
| 334 | Thursday |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | Thursday | |
| 1 Like | 03-20-2021 12:46 AM | |
| 1 Like | 01-26-2021 01:57 PM | |
| 1 Like | 01-26-2021 03:20 PM | |
| 1 Like | 09-25-2020 07:41 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 04-16-2016 09:37 AM |
| Date Last Visited | yesterday |
| Posts | 47 |
| Total Likes Received | 5 |
Saturday
This is what I am referring to: PAN-157620: (VM-Series firewalls deployed in Amazon Web Services (AWS) instance types M5 and C5 only) Fixed an issue where a Panorama Virtual Appliance in a high availability (HA) configuration entered a suspended state due to a virtual machine (VM) memory size mismatch.
... View more
Saturday
I opened a TAC case with medium severity case. I request to close the ticket in the portal two minutes after opening it, and yet, I got a call from the TAC 10 later somewhere in India. Guess they didn't even read the ticket. I opened a TAC case with S2 (high) and 10pm ET and no one from TAC got back to me until 3pm ET. After back and forth with the TAC engineer for over an hour, the TAC engineer finally told me the issue but could NOT share the bug PAN-ID but didn't give me any reasons why. This is the issue in 9.x with no solution. I guess PAN recognizes and fix it in 10.x. Go figure.
... View more
Thursday
Finally a TAC engineer called me back and shared zoom at 3pm ET. She is giving a bunch of incorrect information and when I questioned her on it, she is back to doing more research. Very frustrating 😞
... View more
Thursday
Opened a S2 (high) ticket at 11am ET this morning about panorama in High Availability in suspended mode after upgrading from 9.1.9 to 9.1.10. No response from TAC support after two hours. I called in and have been waiting for over an hour with no one from PAN support responding. This is outright bad. A lot of cases that I've opened with TAC support ended up going nowhere.
... View more
05-06-2021
08:53 AM
Just want to provide an update to this issue. It is now May 6th, 2021 and the issue is still NOT fixed by PAN.
... View more
03-25-2021
08:32 AM
Just a quick update on this. PaloAlto has released an update of Application and Threat update on 03/16/2021 but sadly it is still broken in PAN OS 8.1.17. TAC is still investigating more than three months after the ticket was opened 😞
... View more
03-20-2021
12:46 AM
1 Kudo
I use a python to log into Panorama every 5 seconds and run these three commands and pipe them into an ascii file: show clock | match GMT Sat Mar 20 07:40:04 GMT 2021 > debug log-collector log-collection-stats show log-forwarding-stats | match "syslog dropped count" syslog dropped count: 23026208 > debug log-collector log-collection-stats show incoming-logs | match "Incoming" Incoming log rate = 1389.45 Then I use grep and awk to find out if the count the diff in the dropped count and Incoming log rate base on the timestamp. PAN TAC support also has something similar but they run it in Teraterm for Windows. Real engineers use Linux 🙂
... View more
03-18-2021
06:33 AM
Just a quick update on this issue. It turned out that my log collectors spiked to 15K/sec for incoming log and the instance we have is only for 10K/sec for incoming logs. I am going to increase the size, CPU and memory, of the AWS EC2 instance. Hopefully, it will go away.
... View more
02-23-2021
04:09 PM
@BPry: My instance is 16CPU with 64GB RAM. According to PAN, it is capable of handling of 10,000 logs/sec. Maximum logs/sec in my situation is around 4,500 logs/sec so I have plenty of resource on the Panorama to handle the log. Waiting for the next move from TAC support.
... View more
02-23-2021
08:18 AM
@reaper: What is the command do you recommend? I am using " debug log-collector log-collection-stats show log-forwarding-stats | match syslog " and I am seeing this: syslog enqueued count: 3260998077 syslog sent count: 3260769863 syslog dropped count: 422974378 syslog Queue depth: 0 What do you mean by the log rate is too high? My panorama is running in AWS with the biggest available EC2 available.
... View more
02-23-2021
05:57 AM
I heard back from PAN support after the case was opened six weeks ago. PAN support that it is a code issue in Application and Threat update. They will update the application and threat update sometime in the first week of March. Will see if they actually fix the issue.
... View more
02-23-2021
05:55 AM
I have a active-standby panorama cluster version 8.1.17 that manages about 40 firewalls. The active-cluster panorama is also a log collector-group. 20 firewalls send traffic/threat/URL logs to active panorama and the other 20 firewalls send traffic/threat/URL logs to the standby panorama. From there, I configure panorama to forward these logs to syslog splunk. I have PAN TAC support look at the configuration and they confirm the setup is good. Here is the issue. When I use the command "less mp-log syslog-ng.log", I can see the drop increment from panorama to the syslog splunk every 30 minutes or so. The counter is measured every ten minutes. On the syslog Splunk side, they confirmed that the traffic never arrived in tcpdump (syslog is clear text so we can decode the missing logs). I've opened a ticket with PAN support and waiting to hear back from them but it is currently with the first tier level TAC support so not much hope so far. Why would panorama stop forwarding log to external syslog splunk? Has anyone seen this issue before? TIA.
... View more
02-08-2021
10:09 AM
50% difference does sound bad.
... View more
02-04-2021
03:42 PM
I run into this exact same issue a few weeks ago. There is a very good read on this: https://www.networkdefenseblog.com/post/wireshark-tcp-challenge-ack
... View more
Contact Me
| Online Status |
Online
|
| Date Last Visited |
yesterday
|
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
