About jeff6strings

We have a 5220 running 9.1.12-h3, and it has a 10 Gb vwire with multiple VLANs configured with managed switches on both sides. There was a 13 Terrabyte copy across this vwire, and then as that was finishing, there was a 3 Terrabyte data copy. Both were sources from the same side of the vwire, and both towards (destination side of vwire) servers and storage on the other side of the vwire.   Just as both overlapped, we lost connectivity to servers and other resources on the destination side of the vwire. Once we restarted the dataplane on the firewall, we could access the servers and resources.   Interestingly, the Data Plane CPU (in the System Resources widget) showed less than 10% during this issue. Has anyone experienced this or similar behavior? Is it possible for the dataplane to be overwhelmed? And if so, for the CPU utilization to be low? Thanks for any help. ... View more

I'm testing (starting) my ethical hack skills and testing our GlobalProtect Gateways for vulnerabilities.   I used the Windows ike-probe and Kali Linux ike-scan against a Cisco gateway with VPN services running. The ike-scan results are what I expected in receiving a response or acknowledgment of 1 returned handshake with the available ciphers. The ike-probe results were expected as well, with recv_notify on most ciphers.   I ran the same scans against a Palo Alto GlobalProtect Gateway with Portal and Gateway configured. This Gateway is working with GlobalProtect clients in IPSec mode and default settings. The ike-scan and ike-probe results are negative as compared to the Cisco gateway.   Is the Palo Alto Gateway more secure? Am I missing a command option with both scans? Appreciate any help.   Jeff ... View more