About oscaringosv

oscaringosv · ‎06-08-2018

Yes, I think is set to Management Mode, I'll double check ans see if that the case, Thanks

oscaringosv · ‎06-08-2018

There is a BYOL vm that I just spin up, the only issue that I'm having is adding an extra disk. rather than that the Image works just fine.

oscaringosv · ‎06-07-2018

Hi everyone, I'm testing the option to migrate our current Panorama VM appliance to azure, I already spin up a new vm and it works just fine, I encountered an issue adding a new virtual drive to the vm, followed all the steps and running the "show system disk details" i get this message Name : sdc State : Present Size : 2095104 MB Status : Unavailable Reason : Admin disabled I tried to run " request system disk add sdc " but it loks like the CLI command does not exist on version 8.1, is there a different way to achieve this?

oscaringosv · ‎02-20-2018

Thanks for the Info.

oscaringosv · ‎12-15-2017

We had a similar Issue with Skype and Teams, what we did, we excluded from decrypt "internet-communications-and-telephony" category, for some reason that we don't know yet O365 apps does not like being decrypted, not a good solution but in the mean time could work for you.

oscaringosv · ‎12-13-2017

@DIRTTI created a rule base on destination IP and it works perfectly, thanks.

oscaringosv · ‎12-08-2017

Hello everyone, How do you add an expecific application when there is no URLs inside the log?, I.E if you check the traffic logs it's showing SSL as Application and no more info rather than a destination IP that could be changing in the mayority of cases I see the "category" of the App but I don't want to exclude an entire caterory from SSL just a single App or IP Address, also in a different case I need to exclude an especific IP address from SSL decryption how do you achieve this ? thanks a lot in advance.

oscaringosv · ‎11-09-2017

A few ones: #Credential Detection #Unified Log view #Tunnel Inspection

oscaringosv · ‎10-25-2017

I have tested version 8.0.x in many spares PA200's not in production, what I've seen is that commit times and cpu usage of it is Higher compare with version 7.1.X even dough they only have one or two devices using the firewall, I would recomend to stay with version 7.1 works better on these models.

oscaringosv · ‎08-02-2017

@Brandon_Wertz, let us know what they say.

oscaringosv · ‎07-17-2017

I have upgraded a few PA-200(Test Lab only) it takes around 10 minutes and 6-8(Firewall being offline) minutes after rebooting to apply new version.

oscaringosv · ‎07-11-2017

Location: Small branch Offices with CISCOs ASA, migrate to PA-2XX series Tip: I dind't use the migration tool for cisco FWs, I created a new configuration or Panorama templates/device configuration stacks, is by far better and faster than migrating all kind of rules, good if you have a lot of objects and subnets. Palo Alto firewall makes implementation way easier.

oscaringosv · ‎06-19-2017

Is there a way to know the hardware specs on the PA-500 ?, sorry I found it https://live.paloaltonetworks.com/t5/Management-Articles/How-to-determine-RAM-in-PA-500-1GB-RAM-or-2GB-RAM/ta-p/65863

oscaringosv · ‎06-01-2017

Yes, that's what I think, also adding SSL decryption would add more CPU impact.

oscaringosv · ‎06-01-2017

You could create a custom rule base on application, also you need to enable SSL decryption in order to work

oscaringosv · ‎06-01-2017

Hello everyone, A few days ago I was testing version 8 with a few PA-200s that we have in our lab, tested new features mostly with user credential Submission. I found that the performance of the devices were impacted (Data Plane CPU was around 70%-95%) only having one or two devices connected to it, is there any advise of using version 8.0.x for these specifics firewall models, or do I stay in version 7.1 ? any advise would be most appreciate.

oscaringosv · ‎04-19-2017

"What I wish I had known" that a complex administration appliance (Panorama) will help me in one or two clicks to apply configuration changes to almost 100 firewalls in a few seconds and not go firewall by firewall that used to take me a few hours, now it makes our company happier and more secure, quick example would be deploying an emergency content updated. WAY FASTER, thanks to Palo Alto Panorama :). P.S: Almost all of my questions or steps by steps procedures (Like 80% of the time) are here in the community.

oscaringosv · ‎01-06-2017

Thanks for your reply @BPry, and do you think this is possible via Custom Category? https://live.paloaltonetworks.com/t5/General-Topics/URL-wildcard-Pattern/m-p/136217#U136217

oscaringosv · ‎01-06-2017

Where's the document?? I have the same issue..

oscaringosv · ‎01-06-2017

Hello everyone, I need to block URLs that have a word pattern/string, It is possible to restrict certain strings inside the name of a URL?? for example the word "good" inside the website "www.goodwill.com" to be blocked ? I already try with Wildcards, any ideas on how to achive this ? block keywords for web browsing is this possible and how to do it?

oscaringosv · ‎12-08-2016

Hi Indram, Is safe to add the firewalls to panorama, the default settings will be only for communication between both Panorama-Managed firewalls, Panorama place newly added firewalls to a default group and does not Apply any settings as long as you don't add them to a specific group.

oscaringosv · ‎12-02-2016

Yes, I assumed that too but seems that is not working the way I want, I upgraded the firewall that we have from version 7.0.4 to 7.1.3 to see if that fixed the issue but unfortunately same behavior, I think I will open a case with support.

oscaringosv · ‎12-01-2016

I'm using group by "Day". Sort by "Day" does not exist

oscaringosv · ‎12-01-2016

Hello everyone I have a question, I was recently exporting a few reports to PDF and I realize that the order regarding to the column Day Received is not the same when you export it to PDF as we see in the Custom Report builder. I'm using version 7.1.3

oscaringosv · ‎08-18-2016

Thanks BPry, In the mean time I will use a script.

oscaringosv · ‎08-17-2016

Hello everyone, I want to know if is possible to ask Palo Alto to add this feature to Panorama, we have 100+ firewalls at branch offices, when we applied a software upgrade for example 6.0 - 7.0 it always ask for a reboot to apply the new version (In a perfect world we could reboot the firewall at any time but sadly is not possible until third shift or non working hours). It will be great to have a chedules tasks to do it from Panorama. Is there a especific site to ask Palo Alto to add this feature maybe in future releases?. Thanks for your help.

Date Registered	‎04-21-2016 05:51 AM
Date Last Visited	‎09-26-2019 12:58 PM
Total Messages Posted	37
Total Likes Received	10

Online Status	Offline
Date Last Visited	‎09-26-2019 12:58 PM

Strata

Prisma

Cortex

About oscaringosv