Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About LukeBullimore
About LukeBullimore
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
yesterday
230Posts
99Likes
42Solutions
Apr 10, 2021Last Visited
User
Activity
User
Profile
Latest posts by LukeBullimore
| Subject | Views | Posted |
|---|---|---|
| 364 | 10-16-2020 07:04 AM | |
| 1287 | 02-28-2020 02:37 AM | |
| 1288 | 02-28-2020 02:35 AM | |
| 1401 | 02-26-2020 03:59 AM | |
| 5095 | 01-06-2020 07:21 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 05-31-2018 01:37 AM | |
| 2 | 03-11-2019 09:12 AM | |
| 1 | 10-05-2018 08:11 AM | |
| 1 | 04-30-2019 06:56 AM | |
| 2 | 10-15-2018 07:58 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 2 | |||
| 2 | |||
| 1 | |||
| 4 |
User Badges
Public Statistics
| Date Registered | 12-08-2016 05:52 AM |
| Date Last Visited | yesterday |
| Total Messages Posted | 236 |
| Total Likes Received | 99 |
10-16-2020
07:04 AM
Hi Team,
I am trying to use Expedition for PA-7050 to PA-5250 hardware refresh for the purpose of remapping interfaces.
When I come to generate the XML it gets stuck at "generating schedules". My expedition is on the latest version [1.1.82.2]
Log exerpt from /tmp/error below
tailf error
Warning: get_class() expects parameter 1 to be object, boolean given in /var/www/html/libs/xmlapi.php on line 1838 object(SimpleXMLElement)#88 (0) PHP Fatal error: Fatal error: Uncaught Exception: Wrong type of input parameters, expected SimpleXMLElement key:value: in /var/www/html/libs/xmlapi.php:1857 Stack trace: #0 /var/www/html/libs/common/xml/panosxml.php(1692): SimpleXMLElement_append(Object(SimpleXMLElement), false) #1 /var/www/html/bin/configurations/output/output_function.php(294): xml_schedules(Object(SimpleXMLElement), Array, Array) #2 /var/www/html/bin/configurations/output/output_function.php(25): generate_xml(Array, '2') #3 {main} thrown in /var/www/html/libs/xmlapi.php on line 1857
Cheers,
Luke.
... View more
02-28-2020
02:35 AM
Hi Team,
I'm having an issue where after successfully merging and then generating the config, I am unable to download either the XML or the ZIP file. Clicking the button just does nothing.
In /home/userSpace/projects/{project name}/MT-{projectname}.xml.dat I SCP this off the Expedition server but its just an unreadable dat file.
Help!
... View more
02-26-2020
03:59 AM
Hey @JimMcGrady , When doing a firewall failover, how long are you waiting between checking interface IPs? The reason for this is because using the Plugin for failover can take a few minutes. The recommended method to deploy VM series for high-availability in Azure is with two VM series deployed into two availability sets that sit in a load balancer sandwich. Thanks, Luke.
... View more
- Tags:
- ey
01-06-2020
07:21 AM
Hi All, It is possible to drop packets with the timestamp option set through a Zone Protection profile. Network -> Zone Protection -> Packet Based Attack Protection -> IP Drop -> Timestamp. The zone protection profile would then be applied to the ingress zone, untrust. Cheers, Luke.
... View more
11-11-2019
06:23 AM
@cdowdy @Chacko42 Did you both get anything useful from your TAC case? This is still a problem for us and its fallen off my radar up until now. Cheers, Luke.
... View more
10-31-2019
06:53 AM
Looking at the metrics, both firewalls are showing as 100% healthy. The traffic is now coming from outside -> into the load balancer -> into the firewall -> we are sending it from the firewall to the test web server but if we do a pcap on the test web server, it doesn't see anything.
... View more
10-31-2019
05:30 AM
Hey @jmeurer Didn't originally since I thought no NSG meant allow all. I've applied an allow-all one to the untrust interface now and I'm seeing traffic thats hitting the palos untrust public IP. but not the public ip of the load balancer, any ideas?
... View more
10-31-2019
04:34 AM
Hi Team, I've set up a public load balancer, with its respective backend pool pointing to the firewalls untrust interfaces and a test load balancing rule, but no matter what, nothing is ingressing on our public interface! The weird thing is, the untrust interface the firewall has, also has a public IP attached to it, and I'm not seeing any generic scanner traffic ingressing on the untrust interface either? I can ping from the outside interface to google, and vms within trust can also get out to the internet, so return traffic is working. The health probe status is also 100 for both firewalls. No NSGs attached. Help!
... View more
10-14-2019
02:19 AM
1 Kudo
Hi Team, I'm trying to onboard one of our firewals to the Cortex Data Lake. It has the logging service license and when I put in the onboarding PSK and click status, I get: Failed to fetch ingest/query FQDN for customer (curl failed) I've tried - Giving the firewall an NTP server - Removing and re-adding the license - Manually fetching the certificate (it fails) > request logging-service-forwarding certificate fetch Successfully scheduled logging service certificate fetch job with a job id of 2132 > show jobs id 2132 Enqueued Dequeued ID Type Status Result Completed ------------------------------------------------------------------------------------------------------------------------------ 2019/10/14 10:18:24 10:18:24 2132 LCaaS-certificate-fetch FIN FAIL 100 % Warnings: Details: - Manually fetching the customer info (it fails) > request logging-service-forwarding customerinfo fetch Successfully fetch Logging Service region info > request logging-service-forwarding customerinfo show Server error : Unable to read the LCaaS customer information. Please re-fetch region info
... View more
07-04-2019
06:42 AM
Hey Guys,
On the main page, https://live.paloaltonetworks.com/t5/Expedition-Migration-Tool/ct-p/migration_tool the link to get the tool - VM is broken. After you log in through box it says the file has been removed!
... View more
06-18-2019
02:32 AM
1 Kudo
Hey @Pattarachai This is totally possible! I'd recommend checking out the documentation below. https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/manage-firewalls/transition-a-firewall-to-panorama-management/migrate-a-firewall-to-panorama-management.html
... View more
06-18-2019
02:21 AM
Hey @anthonyx10networks Main question to ask is what their throughput requirements are. Looks like with everything turned on the WatchGuard does 8Gbp/s -so the direct comparison would the PA-5220. https://www.paloaltonetworks.com/resources/datasheets/product-summary-specsheet
... View more
06-18-2019
01:13 AM
1 Kudo
Hey @Jonathan_Panes When you create a custom application, it will take precedence over the predefined applications. When you're using your custom app-id in the App override, the Layer7 will stop. When you put web-browsing in the App Override, Layer7 can continue, hence you could download the file. Thanks, Luke.
... View more
06-17-2019
01:37 AM
1 Kudo
Hey Jon, Layer7 processing for an app will only stop when using a PBF rule if you override the app to a custom one i.e "MyCustomApp". Overriding the traffic to an existing app such as web-browsing in this example will keep the content inspection enabled. Thanks, Luke.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
yesterday
|
Likes Given To
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
