Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About ttongfly
About ttongfly
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
08-18-2015
76Posts
6Likes
1Solution
Aug 18, 2015Last Visited
User
Activity
User
Profile
Latest posts by ttongfly
| Subject | Views | Posted |
|---|---|---|
| 787 | 12-26-2012 12:04 AM | |
| 507 | 11-28-2012 12:42 AM | |
| 2485 | 11-25-2012 06:23 PM | |
| 457 | 10-18-2012 06:15 PM | |
| 1195 | 07-04-2012 12:37 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 10-18-2012 06:15 PM | |
| 1 | 05-30-2012 10:28 PM | |
| 1 | 11-03-2011 10:50 PM | |
| 1 | 10-13-2010 07:49 AM | |
| 1 | 05-09-2012 11:41 PM |
User Badges
Public Statistics
| Date Registered | 05-30-2010 06:48 PM |
| Date Last Visited | 08-18-2015 09:06 AM |
| Total Messages Posted | 76 |
| Total Likes Received | 6 |
12-26-2012
12:04 AM
Hello guys. I could not find any information of multicast processing on layer 2 mode for PAN. I wonder about that how do PAN deal with multicast traffic such as HSRP, VRRP and OSPF (that use multicast addressing) on layer 2 mode. I believe that PAN would bypass and forward multicast traffic but I'm not sure. Please answer me above question. Thanks Regards, Roh
... View more
11-28-2012
12:42 AM
Hello guys, I want to install a PBF rule with custom application. Is it possible to configure on PAN? Thanks. Regards, Roh
... View more
11-25-2012
06:23 PM
Hello, Would TLS 1.1 and 1.2 be decrypted by PANOS 5.0 for now? TLS 1.1 with differ hellman could no be decrypted on PANOS 5.0 also? Thanks. Regards. Roh
... View more
10-18-2012
06:15 PM
1 Kudo
Hello, You should enable option "Enable X-Auth Support" and Group name and pass-word also should be configured. For iPad, You should configure VPN selected IPSEC (Cisco) and then configured Group name and password you configured on GP GW. Finally, You can connect using iPAD and iPhone to GP GW using particular credencial. PANOS 4.1.6 above that support X-Auth, pre-shared key and Android Platform also. Thanks. Regards, Roh
... View more
07-04-2012
12:37 AM
Hello mikand, Thanks for reply. As you wrote "insufficient-data' means that is not enough data packets for identifying the application. I think insufficient-data, not to be identified app-id, was undecided application on session browser. However in my case, UNDECIDED traffic had got so many packets and data exceed over about 1.3GB on session browser. Its traffic could be insufficient-data? I suspect that. When captured PCAPs, the traffic was recognized NFS protocol on wireshark. Thanks. Regards. Roh.
... View more
07-03-2012
10:38 PM
Hello guys. I have some question about APP-ID. For session browser, PAN recognized application was UNDECIDED and traffic was passed and state was ACTIVE. so traffic was not dropped but why PAN could not recognized application properly and recognizing UNDECIDED that means PAN could not identified APP-ID for its traffic. 1. Why PAN could not recognized properly app-id and session browser showed app-id was UNDECIDED? 2. What is UNDECIDED mean exactly on session browser? 3. UNDECIDED application traffic has got a so many packets (of course this traffic over the 7 packets that could do identifying app-id) and bytes. so I think PAN should recognize this traffic as a proper app-id. Please let me know why did PAN recognize UNDECIDE as a app-id on session browser. Thanks. Regards. Roh.
... View more
06-21-2012
02:16 AM
Hello PAN would retrieve the license from PAN license server via MGT interface is default. 1. checking MGT interface could access the internet 2. checking MGT interface could look up a domain name for PAN license server. (google DNS server 8.8.8.8 and 8.8.4.4 is best I think) Thanks. Regards. Roh.
... View more
05-31-2012
07:46 AM
Hi notleyhigh. PAN device would access update-server using MGT interface is default. You should check that your MGT that access the internet or look up a DNS server that you configured or connect updates.paloaltonetworks.com. Thanks. Regards. Roh.
... View more
05-31-2012
07:41 AM
Hi mikand. The max capacity of SSD is 192.48GB (Used 182.86 + Free 9.62 = 192.48GB) is diffrent from 188.82GB (198G/1.024/1.024) that showed CLI. I guess SSD max capacity should be 188.82GB but 192.48GB using calculating 1000 and 1024 as factor. Why SSD max capacity is 192.48GB and not 188.82GB? I wonder about one more about SSD. SSD is 240GB but it showed from CLI is 215GB as below /dev/md3 = 3.8G ( / partition) /dev/md5 = 7.6G ( /opt/pancfg partition) /dev/md6 = 3.8G ( /opt/panrepo partition) /dev/md8 = 198G (/opt/panlogs partition) 3.8G + 7.6G + 3.8G + 198G = total 215GB Umm. SSD is 240GB but CLI showed only 215GB. where is 25GB? I guess, Somtimes SSD is using the space for over-provisioning that makes it less than total storage capacity. The SSD 240GB model that PAN has used is also applied over-provisioning space? so I could not find that 25GB? Please let me know how do PAN used over-provisioning space if PAN SSD be applied it. Please verify this case. Thanks. Regards. Roh.
... View more
05-31-2012
01:25 AM
Hi Guys. My customer have using SSD 240GB on PA5060 device and disk info is below As you see above, CLI showed Log parttition is 198G and WEB-UI is 192.48GB. so I try to calculate but result is 198G /1.024/1.024 = 188.82GB. is not same 192.48 GB from log parttion size of WEB-UI. SSD disk space to calculate is diffrent from SATA DISK of PA2000, PA4000 or PA500 series? Please answer me above Thanks.
... View more
05-30-2012
10:28 PM
1 Kudo
Hi As Ameya mentioned, when configured IPSEC VPN and SSLVPN with Active-Active, Only floating IP can be used in this sceinario.
... View more
05-10-2012
12:35 AM
Hello guys As you know that PAN could show a release date of contents as below. I wonder about above date is related timezone configured PA box or only US/Pacific time? Thanks.. Regards. Roh.
... View more
05-09-2012
11:41 PM
1 Kudo
Hello guys. As you know that PAN has got a option of session that non-syn-tcp. I have a question about non-syn-tcp. When reject non-SYN first packet was false (when non-syn-tcp was not dropeed) and non-syn-tcp session already establised throught PAN device If non-syn-tcp option were changed to true that makes drop session that established non-syn-tcp session? If it used command of configureation mode "set deviceconfig setting session tcp-reject-non-syn yes | commit", that makes drop also established non-syn-tcp session? Thanks. Regards. Roh.
... View more
04-20-2012
12:53 AM
HI mikand Customer has running PANOS 4.0.10 and could not make custom app-id for ICMP as you discussed. I think should be waited for next threat update to add traceroute app-id Thanks for kind answer! Have a good day. Regards. Roh.
... View more
04-19-2012
06:39 PM
Hi guys. I found that traceroute APP-ID on Applipedia web-site as below So I updated newest signature of Application and Threat that version to my PA box is 303-1361 (2012/04/17) but I could not find the traceroute APP-ID on my box. Why it is deffrent between newst signature and applipedia app-id list? When do I use the traceroute app-id? Thanks. Regards. Roh.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-18-2015
09:06 AM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
