About mhuels

Till now, we didnt open a support request. But i will do so this morning. Thanks Manfred ... View more

We can see another strange behaviour by the firewall, which shows in the same direction: Especially if using the Firefox Browser will the third or fifth reload of a ssl-crypted website be undecrypted by the firewall.You simply have to click "reload" several times on any SSL Website. Very strange behaviour by a security device. Manfred ... View more

I have reimported the certificate. Unfortunately the problem is still going on. The SSL warning is not as usual as in the beginning, but it reappears frequently. Guessing a performance problem with our hardware (PA 2050 from 2010), what can we do? greets Manfred ... View more

Hi sdurga, first i tried to disable device->setup->Server CRL/OCSP Settings. this works a bit. Now the SSL crypted websites will be mostly continuous decrypted. With some rare exceptions: if we get an error message like this here i get an undecrypted website at next, if i click "Nochmals versuchen". Next i will try your suggestion. greets Manfred ... View more

Hi tettema, ... Anything the firewall blocks should be blocked consistently. .. Hope so. But apparently this happens not in all cases. If you are using a browser, it is possible that the browser is caching data and reserving it to you.  I used a browser, but the "pdf"-file was surely not in the browsercache. Are you using a block action or a continue action in your AV profile?  Which ones specifically are you seeing this behavior with, and can you describe the sequence of actions in detail? Please take a look at our AV-profile. There is no "continue". Sorry, there is no more detail. I simply clicking on the pdf link  http://www.faerber.fidelitas.de/virtst/eicar.pdf and see sometimes my firewall warning "blocking a dangerous site", and some other times "Fehler beim Laden des PDF-Dokumentes" (english translation: "Error while loading the PDF file"), because it is not really a pdf file. regards Manfred ... View more

again i like to explain, that this PDF Exploit is not the onliest one, which is not detected by IDS in the last weeks. mfg Manfred ... View more

Hi Parth, i am sorry. I do not have sufficient rights to generate a ticket on your website. Please do it yourself. Let me know, if you like to have some additional informations. regards Manfred ... View more

Hi rmonvon, i did so a couple of days ago. For today PAN promises a remote desktop session. On my humble opinion the troubleshooting capabilities within the firewall should be improved. mfg Manfred ... View more

Hi Kal, we had made our certificates all within our Windows Server (TM). Your windows admin shall produce a certificate "for all issues" and sign it by his root-ca. Thereafter he has to export both certificates (the just generated private key and the just signed publich key) in one file. The format of the file has to be "pfx". Dont forget to ask which passphrase was used. greetings Manfred ... View more

Synchronizing within the cluster fails too. HA-Sync and the manual commit fails without any usefull log entry. Couriously the validation dialog says: May 03 12:57:22 Configuration is valid Palo Alto Networks has now climbed a couple of points on my personal list of the world most evil software. Its not so far away from Lotus Notes any more 😉 mfg Manfred ... View more

Hi mikand, i make my tries on a backup machine, but i have no spare firewall to try on another hardware. The PAN support recommended a "factory reset" and consecutively a config load of a preserved XML-File. After the factory reset the firewall runs fine at first. By trying to load the old config, the GUIs tells "... import successfull". But the rules and objects are not present. The ms.log says " May 02 11:58:24 Error: pan_mgmt_get_sysd_string(pan_cfg_status_handler.c:363): failed to fetch May 02 11:58:25 Error: pan_cfg_mgr_get_sp_disabled(pan_cfg_mgr.c:809): failed to fetch: NO_MATCHES ls: /opt/panlogs/logdb/appstatdb/1/: No such file or directory May 02 12:00:04 Error: pan_dir_exists(pan_fs.c:183): entry exists but it's a file May 02 12:00:04 Warning: ha_cfg_filesync_md5sum(ha_cfg.c:1104): All values seem to be disconnected from peer, giving back error or md5sum failue May 02 12:00:04 Error: pan_mgmt_ha_set_dsmd5sum(pan_mgmt_ha.c:170): failed to calculate disk-state md5sum May 02 12:06:08 Error: pan_dir_exists(pan_fs.c:183): entry exists but it's a file May 02 12:06:09 Warning: ha_cfg_filesync_md5sum(ha_cfg.c:1104): All values seem to be disconnected from peer, giving back error or md5sum failue May 02 12:06:09 Error: pan_mgmt_ha_set_dsmd5sum(pan_mgmt_ha.c:170): failed to calculate disk-state md5sum " I cannot detect any hints for further troubleshooting. Next i will try to put this firewall by hand to the firewallcluster and synchronize the config over the running firewall. mfg Manfred ... View more