About Gun-Slinger

We recently upgraded to 10.1.5-h1 and it appears after the upgrade the Windows-Remote-Managment traffic over tcp5985 is now being identified as Web-browsing. This is causing that traffic to drop. We checked dynamic updates and presently leveraging the latest update released on 5/16. Seeing if this is a growing issue? ... View more

Why is this a warning? Has anyone found a way to keep this from displaying as a Warning? This cases our SOC personnel to ignore when the commit status completes as 'Commit completed with warnings"   We are running 10.0.6 - Panorama and 9.1.9 - Gateways   ... View more

I wanted to put this out in the forum to to save someone time and answer the question on the use case of TS-Agents participating in user-id redistribution. In a long trouble-shooting period and TAC engagement, it was confirmed that you cannot redistribute user-id mappings obtained from a Terminal Services (TS) agent. We have submitted a FR for this capability but until that wins the FR voting battle we have to program the TS-agent on every cluster that is to use a user-id policy from the server. Down side to this is we have an RDHS environment that will dynamically spin up another RDSH server and use the next available IP in the subnet range when it reaches a user cap (about 10 users per server). This has forced use to program a very large range of TS-agents on each cluster that users would connect through on user-id policies. Not ideal and limited to the hardware capacity.  ... View more

Has anyone found a way to see a hosts generated connections per second? In other words we want to hone in on a specific host and see the CPS being generated in either a live or post event.   All I have found so far is global cps (show session info)   Thank you ... View more

We have completed the installation and integration of the Cisco ACI plug-in to our panorama environment. We have found that on 2 of the 3 APIC clusters we are tied into for 3 different fabrics we get the following error on synchronization. 'State of ACI fabric is currently changing, unable to retrieve tags. Will try again next iteration." My only thought is a resource issue? The 1 fabric that is successful is considerably smaller the the 2 that are failing. Anyone else run into this and what was the resolution? Thanks ... View more

Situation: NFS Client src:828 dst: 2049 --> PAN 7050 HA Cluster --> NFS Server (NFS Session is up and connected without issue)   Palo alto cluster fail-over occurs (upgrade/issue - doesn't matter)   NFS Client src:828 dst:2049 -->PAN (Session is marked as "undecided" and dropping the syn packets) The timer continues to reset on the session on PAN since the client continues to send syn packets which are dropped. This keeps the session opened until the session is manually cleared by engineers on the PAN cluster.   Is anyone else experiencing this? We haven't seen this occur on any other apps except NFS and seemed to start around 8.1.7.   ... View more

I am on Expedition version 1.1.26 I cannot get the Serach File function in M.Learning under a Panorama device to work. I have verified the permissions for the directory and the directory mapping. This had worked in earlier versions but does not appear to be working now. ... View more