This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Erez
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Erez
01-29-2018
12Posts
1Like
0Solutions
Jan 29, 2018Last Visited
User
Activity
User
Profile
Latest posts by Erez
| Subject | Views | Posted |
|---|---|---|
| 1460 | 09-26-2017 10:32 PM | |
| 4642 | 05-28-2017 11:41 PM | |
| 4646 | 05-28-2017 10:49 PM | |
| 4887 | 05-25-2017 03:32 AM | |
| 5053 | 05-24-2017 10:44 PM | |
| 3662 | 08-22-2016 10:23 PM | |
| 3859 | 08-22-2016 06:23 AM | |
| 4052 | 08-22-2016 06:03 AM | |
| 1283 | 08-22-2016 06:02 AM | |
| 2845 | 07-14-2016 02:19 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 05-25-2017 03:32 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes |
User Badges
Community Statistics
| Member Since | 07-14-2016 12:02 AM |
| Date Last Visited | 01-29-2018 01:53 AM |
| Posts | 12 |
| Total Likes Received | 1 |
09-26-2017
10:32 PM
Hi, According to wf-500 wildfire appliance document the machine supports 7000 files per day. In my organization the machine actually scan more then 15,000 per day so how this is really work? I see that the memory is always around 75% but the Cpu is only 3-5%. Does anyone can explain me how this 7000 files\day limit actually work? Thanks!
... View more
05-28-2017
10:49 PM
Thank you all guys. The working appliance working whether it is active or passive. The other aapliance doesn't work whether it is active or passive.
... View more
05-25-2017
03:32 AM
1 Kudo
Thank you but we already have a 17 rules in the security policy that assignd to wildfire analysis profiles 😞 And The problem is only in one machine in the cluster. the second machine works fine and they have the same rules (it's active passive mode)
... View more
05-24-2017
10:44 PM
Hi PA community, We have two 5060 appliances in active-passive HA mode. We also have WF-500 as private cloud and "Cloudwildfire.paloaltonetworks.com" as public cloud. We have a problem in one of the appliances (Whether she is active or passive): test wildfire registration
This test may take a few minutes to finish. Do you want to continue? (y or n)
Test wildfire Public Cloud
Testing cloud server wildfire.paloaltonetworks.com ...
wildfire registration: failed
Test wildfire Private Cloud
Testing cloud server ********** ...
wildfire registration: failed *******= Our private ip for WF-500. show wildfire status
Connection info:
Signature verification: enable
Server selection: enable
File cache: enable
WildFire Public Cloud:
Server address: wildfire.paloaltonetworks.com
Status: Disabled due to configuration
Best server:
Device registered: no
Through a proxy: no
Valid wildfire license: yes
Service route IP address:
WildFire Private Cloud:
Server address: ************
Status: Disabled due to configuration
Best server:
Device registered: no
Through a proxy: no
Valid wildfire license: yes
Service route IP address: In the second appliance everything is ok. (We have at least 20 rules with wildfire profile) Any ideas?
... View more
08-22-2016
10:23 PM
Here it is: 2016-08-23 08:10:21.222 +0300 Error: pan_mgmt_get_sysd_string(pan_cfg_status_handler.c:367): failed to fetch cfg.platform.uuid 2016-08-23 08:10:21.222 +0300 Error: pan_mgmt_get_sysd_string(pan_cfg_status_handler.c:367): failed to fetch cfg.platform.cpuid 2016-08-23 08:10:22.232 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:10:24.323 +0300 No new WF-Private updates available for download 2016-08-23 08:10:35.242 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:10:48.252 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:11:01.262 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:11:14.272 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:11:27.282 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:11:40.292 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:11:49.893 +0300 Error: __retry_wf_report_fetch(pan_cfg_cms_handler.c:1826): Failed to fetch report from wildfire server 10.24.15.34, initiating retries 2016-08-23 08:11:50.574 +0300 client useridd reported op command was SUCCESSFUL 2016-08-23 08:11:53.302 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=32 2016-08-23 08:11:55.997 +0300 Error: __retry_wf_report_fetch(pan_cfg_cms_handler.c:1826): Failed to fetch report from wildfire server 10.24.15.34, initiating retries 2016-08-23 08:12:06.312 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:12:19.322 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:12:32.332 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:12:45.342 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:12:58.352 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:13:11.362 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=32 2016-08-23 08:13:24.372 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:13:37.382 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:13:46.173 +0300 Error: __retry_wf_report_fetch(pan_cfg_cms_handler.c:1826): Failed to fetch report from wildfire server 10.24.15.34, initiating retries 2016-08-23 08:13:50.392 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:13:52.277 +0300 Error: __retry_wf_report_fetch(pan_cfg_cms_handler.c:1826): Failed to fetch report from wildfire server 10.24.15.34, initiating retries 2016-08-23 08:13:58.379 +0300 Error: __retry_wf_report_fetch(pan_cfg_cms_handler.c:1826): Failed to fetch report from wildfire server 10.24.15.34, initiating retries 2016-08-23 08:14:03.402 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:14:04.480 +0300 Error: __retry_wf_report_fetch(pan_cfg_cms_handler.c:1826): Failed to fetch report from wildfire server 10.24.15.34, initiating retries 2016-08-23 08:14:10.583 +0300 Error: __retry_wf_report_fetch(pan_cfg_cms_handler.c:1826): Failed to fetch report from wildfire server 10.24.15.34, initiating retries 2016-08-23 08:14:16.411 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:14:16.686 +0300 Error: __retry_wf_report_fetch(pan_cfg_cms_handler.c:1826): Failed to fetch report from wildfire server 10.24.15.34, initiating retries 2016-08-23 08:14:22.791 +0300 Error: __retry_wf_report_fetch(pan_cfg_cms_handler.c:1826): Failed to fetch report from wildfire server 10.24.15.34, initiating retries 2016-08-23 08:14:28.894 +0300 Error: __retry_wf_report_fetch(pan_cfg_cms_handler.c:1826): Failed to fetch report from wildfire server 10.24.15.34, initiating retries 2016-08-23 08:14:29.421 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=32 2016-08-23 08:14:35.003 +0300 Error: __retry_wf_report_fetch(pan_cfg_cms_handler.c:1826): Failed to fetch report from wildfire server 10.24.15.34, initiating retries 2016-08-23 08:14:41.105 +0300 Error: __retry_wf_report_fetch(pan_cfg_cms_handler.c:1826): Failed to fetch report from wildfire server 10.24.15.34, initiating retries 2016-08-23 08:14:42.431 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:14:47.205 +0300 Error: __retry_wf_report_fetch(pan_cfg_cms_handler.c:1826): Failed to fetch report from wildfire server 10.24.15.34, initiating retries 2016-08-23 08:14:53.309 +0300 Error: __retry_wf_report_fetch(pan_cfg_cms_handler.c:1826): Failed to fetch report from wildfire server 10.24.15.34, initiating retries 2016-08-23 08:14:55.441 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:14:59.410 +0300 Error: __retry_wf_report_fetch(pan_cfg_cms_handler.c:1826): Failed to fetch report from wildfire server 10.24.15.34, initiating retries 2016-08-23 08:15:00.334 +0300 Checking to purge appstatdb logtype 2016-08-23 08:15:08.451 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 2016-08-23 08:15:21.222 +0300 pan_dynupdsch_local_refresh(pan_cfg_dynupdsch.c:1793): scheduled-update: "_SystemWildfireUpdate_" refreshing of WildFire 2016-08-23 08:15:21.223 +0300 Error: pan_mgmt_get_sysd_string(pan_cfg_status_handler.c:367): failed to fetch cfg.platform.uuid 2016-08-23 08:15:21.223 +0300 Error: pan_mgmt_get_sysd_string(pan_cfg_status_handler.c:367): failed to fetch cfg.platform.cpuid NO_MATCHES 2016-08-23 08:15:21.461 +0300 Error: pan_comm_get_tcp_conn_gen(comm_utils.c:571): COMM: cannot connect. remote ip=10.24.15.35 port=3978 err=No route to host(113) sock=29 NO_MATCHES --2016-08-23 08:15:21-- https://updates.paloaltonetworks.com/Updates/UpdateService2.asmx/CheckForWildfireUpdate Resolving updates.paloaltonetworks.com... 199.167.52.141 Connecting to updates.paloaltonetworks.com|199.167.52.141|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 1606 (1.6K) [text/xml] Saving to: `/tmp/.wildfireinfo.xml.71763.tmp' 10.24.15.35 is our pamorama machine but we didn't using the machine.
... View more
08-22-2016
06:23 AM
Thank you, The DNS service route is via MGT. I did Tcpdump from DNS server (tcpdump filter "src net dns server") and then force refresh fqdn this is the result: 8517 packets received by filter 0 packets dropped by kernel This is ok no?
... View more
08-22-2016
06:03 AM
Hi guys, I have a big problem. My PA failed in refresh fqdn task and now the PA can't resolve Fqdn object. My dns Setting are good and there is no drops between PA and DNS server. Any advices? Thank you!
... View more
- Tags:
- fqdn
08-22-2016
06:02 AM
Hi guys, I have a big problem. My PA failed in refresh fqdn task and now the PA can't resolve Fqdn object. My dns Setting are good and there is no drops between PA and DNS server. Any advices? Thank you!
... View more
07-14-2016
01:20 AM
Thank you. We decrypt the traffic in our compny. so we know it's gmail. We can block all web based email sites but when user download files the download address dosn't recognize as web based email...
... View more
07-14-2016
12:06 AM
Hi, I've tried to set a new rule that will block download\upload file from web based email. The problem is that when user downlod files from outlook.com (for example) the service is not recognize as "web based email". Any suggsestions? Thank you!
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks