This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About JoshuaBolin
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About JoshuaBolin
05-12-2021
10Posts
2Likes
1Solution
May 12, 2021Last Visited
User
Activity
User
Profile
Latest posts by JoshuaBolin
| Subject | Views | Posted |
|---|---|---|
| 2223 | 06-11-2020 08:45 AM | |
| 2414 | 05-06-2020 08:31 AM | |
| 3388 | 04-10-2020 06:22 AM | |
| 3664 | 04-02-2020 02:20 PM | |
| 2839 | 10-29-2019 09:38 PM | |
| 2895 | 10-29-2019 12:38 PM | |
| 4875 | 06-27-2019 10:24 AM | |
| 1849 | 06-27-2019 10:19 AM | |
| 1859 | 06-27-2019 09:40 AM | |
| 2321 | 02-13-2017 08:15 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 10-29-2019 09:38 PM | |
| 1 Like | 06-27-2019 10:24 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 04-25-2016 03:05 PM |
| Date Last Visited | 05-12-2021 12:15 AM |
| Posts | 10 |
| Total Likes Received | 2 |
06-11-2020
08:45 AM
After merging a config in Expedition, when you generate the XML you get two files: projectname.xml and projectname.zip. The ZIP contains a text doc with the set commands as well as the same projectname.xml and a larger projectname-pretty.xml. What is the difference between the two xml files?
To further elaborate, here is a sanitized example:
I was pulling in some security and nat rules along with objects into a panorama config. At the same time I wanted to do a little cleanup on duplicate address objects in Panorama.
So I pulled a fresh config from Panorama: PANOCONFIG.xml (size 18,697 KB)
After the work was performed and the merged output was generated I got these files:
MT-PANOCONFIG.xml (size 11,466 KB) and from the zip file after being extracted MT-PANOCONFIG-PRETTY.xml (size 19,448 KB)
The "pretty" one is what I would expect to see size wise as I added to the config so it is now bigger than the original exported config. But ultimately both the 11KB xml and the 19KB xml work the same, so what is the difference between the two and which one should be used when importing back into Panorama?
... View more
05-06-2020
08:31 AM
I have a client trying to extract a policy from Checkpoint Manager running R80.20 and the script is failing with the error below:
[4/15/20 2:16 PM com.checkpoint.mgmt_api.examples.MyLogger.debug()DEBUG]: Run command: 'show-gateways-and-servers' with details level 'full'
[4/15/20 2:16 PM com.checkpoint.mgmt_api.examples.MyLogger.severe()SEVERE]: Failed to run gateways-and-servers command. Message: 'Requested object [d5919a12-4a37-407b-8d68-05baa475a6bd] not found'. Status Code: '404'
[4/15/20 2:16 PM com.checkpoint.mgmt_api.examples.ShowPackageTool.logoutReportAndExit()INFO]: Script stopped running due to severe error!
[4/15/20 2:16 PM com.checkpoint.mgmt_api.examples.ShowPackageTool.logoutReportAndExit()INFO]: dirPath: /home/an548962ad/b9cc1488-2975-4878-ade6-69bfc2ea42ee
They have used this tool to pull others before successfully from the same Checkpoint manager. Any ideas on where the issue may be?
... View more
04-10-2020
06:22 AM
Yes, the issue is persistent regardless of the browser that is used. I believe it may be something in the 9.0 code.
... View more
04-02-2020
02:20 PM
I have two separate large customers who are both experiencing the same issue. They both have M-600 Panorama appliances in dedicated management mode with HA peers and dedicated log collectors. After upgrading to PAN-OS 9.0.x (currently on 9.0.4) - the GUI is slow and refreshes after each change. For example, if you add a TAG to a rule, the section will refresh before you can click on another. If you drag and drop a tag between rules, the maximum you are going to get is two before it refreshes. If I'm performing multiple changes to a policy, after a few rules in it will start jumping back to the top of the policy after every refresh. It's very annoying and leaving a bad impression of the GUI with the customers. Is this a known issue? Is there a fix to this issue? I'm struggling to find any answers through searching Live and other tech blogs.
... View more
10-29-2019
09:38 PM
1 Kudo
Thank you to Mark Bowling for answering this for me. Posting it here for the community:
the Syntax for 9.x forces you to put the "from filename.xml" portion of the load config partial statement at the end instead of at the beginning.
... View more
10-29-2019
12:38 PM
With the upgrade to PanOS 9, I'm assuming the xpath has changed since I'm getting "invalid syntax" when trying to use the version that worked with 8.1.x.
Does anyone have an updated one or know what the xpath's changed to?
... View more
06-27-2019
10:24 AM
1 Kudo
I would check the MONITOR tab to see if there were any standout alerts for items you would need to adjust manually. Also check for ghost objects in Addresses and Services.
Another weird one is when an address gets imported, but it reads the CIDR with a long integer instead of a real CIDR. Oddities like that have prevented a successful merge for me in the past.
... View more
06-27-2019
10:19 AM
Found this in another post - adding the first "not captured"
This one is from Cisco
Unfortunately EIGRP is a Cisco propriotry routing protocol and not available on PANOS. Only static, OSPF and BGP are available on the PAN appliances. With that said, Expedition does transfer all your routing information, just not EIGRP.
Cisco has made EIGRP an open standard per RFC7868 since 2016.
... View more
06-27-2019
09:40 AM
I'm looking for a list of 'Gotcha' items that get missed by Expedition during import for each of the different vendor / config file types. In other words, configuration items that either aren't contained within the files imported or items that won't convert. Also, things that get pulled over during import that can be simply removed because they aren't needed in Palo Alto configurations.
Additionally, if there are any gotchas to look out for during migration that you may have come across in your experience - any info is greatly appreaciated. Trying to build a master list of these things as I have not been able to find one yet.
Config types:
Checkpoint
Cisco
Fortinet
IBM XGS
JUNIPER Netscreen
JUNIPER ScreenOS
FORCEPOINT
Sonicwall
Any others that can be pulled in from CSV that we know of?
... View more
02-13-2017
08:15 AM
Issue background: We have a policy for Application Whitelist of allowed applications on the internet firewall. SourceForge-Base is one of these applications. SourceForge-Base had dependencies on SSL, Web-Browsing, and SSH. We allow SSL and Web-Browsing, but do not wish to allow SSH to the entire outbound internet. Our users traffic works fine with only SSL and Web-Browsing being allowed in conjunction with SourceForge-Base when they access SourceForge. Without knowing the IP ranges utilized by SourceForge to allow that in a separate policy by service port, (also without utilizing SSL decryption so an FQDN is not an option), we have no way to allow the traffic other than by application. Is there a way to hide or suppress persistent application dependency warnings in specific so that a commit can come back without warnings? Or is there a way to allow SSH only if it is used in conjunction with SourceForge-Base, as in SSH being an Implicit Use Application for SourceForge-Base?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-12-2021
12:15 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks