About acamacho

I am going to assume that the licenses are updated. If not need to check that. Since you are using service routes the passive interface will not have any access out to the internet so even if you downloaded the seed file from our support site. The PAN needs to be able to go out and get updates as Brightcloud will always have latest update. If you can't use the mgmt port to get out to the internet then you will have always do a manual update. if you have further questions please let us know or call into support. thank you ... View more

The upgrade path to 5.08 from 4.0.12 If you have HA recommend that you upgrade the Passive first until you know that traffic passes and all features link VPN, IPsec in any works Export out your running-config.xml from the PAN so you have a backup in the event you need it. Download and do not install 4.1.0 Download and install 4.1.15 After the reboot and auto comm completes. From the Active device suspend so the passive takes over as the new active. Once you are sure all works then repeat on the active device. If you want to see what bugs and changes have gone into release 5.0.8 from the software link in the DEVICE TAB once you are running with 4.1.15 you should see the release notes. You can also log in to your support portal and under software you can download the release note from there. Hope this helps and if you like you're always welcome to call in for further assistance. Thank you ... View more

Please type the following commands or if it will be easier open a case so we can assist. - show system info - show management-clients - show system resources - show jobs all - show jobs id (select the id that shows a commit failed) ... View more

There are so many different items to look at if you want to know how to troubleshoot UserID issues. You can look in knowledge point for the specific issue you are facing. What is the actual issue you are facing.. Is it a user to ip mapping issue? Is it a LDAP group mapping issue? Your best bet might be to call into support or open a case so we can verify the issue that you are seeing. Thanks ... View more

Hello I just tested and it works from both Safiri and youtube app.. There could be may reasons, so if you have the time to call into support we can take a close look at counters. An any any policy moved to the top with source IP address of the ipad and no filtering should work. If not then we can assist over a web meeting. Thank you ... View more

This does sound like the version of User ID Agent is not supported. What version of PANos are you using? Can a 4.0.x device use the 4.1 user id agent? No. Can a 4.1 device use the 3.1.2 pan-agent? Yes. Hope this helps. ... View more

Hello It sounds like you have your configuration configured correctly, but without seeing only think I can recommend is the following. 1. Select the Network tab 2. Select the Zones link and make sure the zone that your clients connects has the Enable User Identification box checked. 3. Check the traffic log and see if your user name is being seen under the source user column. If you have time during your local business day maybe you can call into support so we can assist. Thank you ... View more

Hi Let me see if I can find the information but in the meantime here is a link that you can also review. https://live.paloaltonetworks.com/docs/DOC-1877 https://live.paloaltonetworks.com/docs/DOC-1936 ... View more

Not sure if you already got your question answered, but another thing to check is under Network Tab... Select Zones and make sure the Enable User ID box is checked. Commit and check logs again. If you already got your answer then my apologies. ... View more

As my colleague stated that is not plausible, so you might want to contact your local SE and have them submit a feature request to see if this will be possible in future releases. Thank you  ... View more

Please add another snap shot of the traffic log that shows the either screen.. need to see if you are hitting the same rules for the users that are not be identified. Also click on the detail icon.. Far left the one with the box and magnifying glass and add that snap shot too. If you have time as well maybe calling into support will help so we can look at it closer. thank you Al ... View more

Upgrading the passive to different version is supported. What you will see on the dashboard is the version will be miss-match which is okay. Once you fail over to the passive and it becomes active after you've confirm that all is work within the network then just upgrade the original active to match. If you have any further questions do let us know. Take care and have a nice weekend. ... View more

Please log on to both HA PA using ssh and execute the following commands: show jobs all show jobs all - This sample shows that commit completed with a date and time. Enqueued                     ID             Type    Status Result Completed -------------------------------------------------------------------------- 2012/09/27 14:36:46           5           Commit       FIN     OK 14:37:02 2012/09/27 11:41:20           4           Commit       FIN     OK 11:41:37 2012/09/27 11:39:05           3           Commit       FIN     OK 11:40:00 2012/09/27 11:31:54           2           Commit       FIN     OK 11:32:51 2012/09/27 11:00:44           1           Commit       FIN     OK 11:01:00 If there is a commit job for the date/time you are reference or a HA sync. If you need additional data let us know. Thanks ... View more

You can also try and open up a security policy and specify the source IP of the test host pc. Create an any any policy without any scan profiles as well. Move the policy to the top. If this works then review the existing policy to see if the application or scan profiles might be preventing the traffic from being identified. If this still does not work you might want to call into support or your local reseller for assistance. Thank you ... View more