About frank_henry

@nextgenhappiness, thanks.  So in HA no problems? ... View more

5.0.10 not stable?  Can anyone input on this? ... View more

We are seeing this also.  It onlyh appears on an FTP rule. I think this is misbehaviour on the part of PA, since we are allowing FTP and only FTP, yet if the Application is not determinable PA's logic just passes it anyway?  This behaviour is inappropriate and dangerous.  Why not just drop it? ... View more

I run the command and it doesn't look like the load is shared amoungst all the cores  ( PANOS 4.0.3) : CPU load (%) during last 13 weeks: core    0       1       2       3        avg max avg max avg max avg max        0   0   1  14   2  81   2  81        0   0   1  25   2  70   2  70        0   0   1  38   2 100   2 100        0   0   1  51   2  78   2  78        0   0   1  24   2  81   2  81        0   0   1  23   2  83   2  85        0   0   1  40   1  80   2  80        0   0   1  23   2 100   2 100        0   0   1  44   2  99   2  99        0   0   1  24   2 100   2 100        0   0   1  44   2  97   2  97        0   0   0  10   0  11   0  11        0   0   0   0   0   0   0   0 Could someone please clarify?  I'd not expect to see MAX of 100 percent if there is a virtually unused core (0, in this case). thanks ... View more

When demoing the product, I could not get this to work.   We don't have any desire for URL subscription license, so we cannot BLOCK ALL then have an allow 'whitelist'.   Tried to block *.* and an Allow List, but the Allow List is processed after the Deny List instead of before so the wildcard blocks access. This is why we'd like to see a whitelist destination 'group' (for lack of a better term) to put into the destination field in the policy.   Obviously the strings in this group would only be applicable to HTTP/HTTPS/FTP.. URIs (and their associated applications/services).   Again, allowing by URI and not the named derived from reverse lookup would be invaluable to many here agencywide and I'm sure to many organizations. - I don't know of any other product that offers this and think it could be a differentiator. Thanks! ... View more

I'd like to formally request that whitelisting exist as a seperate function - apart from URL blocking.  We  have the need to allow only certain domains/urls some of which resolve to Akamai address space which changes randomly.  We also have NIST requirements to LOG everything in a CONSISTANT format.    I suppose we will have to continue to do weekely resolves of the hosts and manually change the destinations until this becomes available.  No fun, that. ... View more

What about the certs that he inquired about? ... View more

I'm having the same sort of error... update failed with the following messages: No matching apps package found in panupv2-all-contents-205-711.tgz ... View more