This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About ericv
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About ericv
08-18-2015
5Posts
2Likes
0Solutions
Aug 18, 2015Last Visited
User
Activity
User
Profile
Latest posts by ericv
| Subject | Views | Posted |
|---|---|---|
| 7123 | 02-19-2015 11:11 PM | |
| 2880 | 02-19-2015 11:05 PM | |
| 2343 | 09-23-2013 11:55 AM | |
| 12907 | 08-27-2013 10:47 AM | |
| 12995 | 08-27-2013 10:00 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 08-27-2013 10:47 AM | |
| 1 Like | 08-27-2013 10:00 AM |
User Badges
Community Statistics
| Member Since | 10-16-2012 06:38 AM |
| Date Last Visited | 08-18-2015 09:06 AM |
| Posts | 5 |
| Total Likes Received | 2 |
02-19-2015
11:11 PM
We found some VPN stability issues when having an IPSec VPN to a Cisco ASA with DPD being enabled. We found intermittent disconnects as DPD was detecting the peer as "down" when it was not. I know DPD is part of phase 1 and not phase 2 but it is something you may want to test disabling.
... View more
02-19-2015
11:05 PM
We used to use 6.0.4 but moved to 6.0.6 after the poodle vulnerability. And again to 6.0.8 after another vulnerability. Odd thing was we ran into an issue with a client who had 6.0.5 where the outside interface was DHCP and it was just not getting anything. 6.0.4 and 6.0.6 got the ip address, outage window ran out so we did not open a case.
... View more
09-23-2013
11:55 AM
If this helps any, we have a client that has 2 x PA-5060 in HA with link aggregation with no issues running 5.0.4 the only difference is an active/active setup rather than active/passive
... View more
08-27-2013
10:47 AM
1 Kudo
Thanks for the quick response, to confirm any setting which is not configured in the template will not over-ride what is on the Palo Alto firewall as long as the "force template value" check box is unchecked
... View more
08-27-2013
10:00 AM
1 Kudo
I have an environment where there are Palo Alto firewalls already deployed and in production (mix of PA-200's & PA-500's), I am building the templates but I want to make sure that when I push them out the templates won't wipe out the management interface settings or settings that are left blank in the template on Panorama. I have looked through documentation and forum searches but it all points to new devices where on the first template push the device can be overwritten. I also know of the option "force template values" and I suspect if this is checked off the management ip address won't get wiped and the existing security zones will stay there but I am hesitant to push this out before being 100% as if it wipes the zones I will lose remote access. I am assuming someone has run into this before.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-18-2015
09:06 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks