Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About dburns
About dburns
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
11-13-2019
65Posts
25Likes
39Solutions
Nov 13, 2019Last Visited
User
Activity
User
Profile
Latest posts by dburns
| Subject | Views | Posted |
|---|---|---|
| 518 | 11-13-2017 03:40 PM | |
| 2110 | 05-07-2015 03:11 PM | |
| 4015 | 05-07-2015 02:50 PM | |
| 1310 | 12-01-2014 11:07 AM | |
| 864 | 12-01-2014 11:03 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 05-11-2011 07:11 PM | |
| 2 | 05-04-2011 03:52 PM | |
| 1 | 06-21-2013 01:49 PM | |
| 1 | 02-23-2011 07:22 PM | |
| 1 | 06-25-2013 09:23 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 5 |
Retired Member
|
User Badges
Public Statistics
| Date Registered | 08-31-2010 05:38 PM |
| Date Last Visited | 11-13-2019 06:35 PM |
| Total Messages Posted | 151 |
| Total Likes Received | 25 |
11-13-2017
03:40 PM
Did you happen to capture the GradARP packets on the passive device as it became active? https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Capture-ARP-Packets-on-an-Interface/ta-p/55835
... View more
05-07-2015
03:11 PM
1 Kudo
What version? And are you sure the API is not being updated? The clear command worked for me. You could also add a timeout and send that to all your api know users therefor they would timeout. admin@PA-200> show user ip-user-mapping all IP Vsys From User IdleTimeout(s) MaxTimeout(s) --------------- ------ ------- -------------------------------- -------------- ------------- 192.168.254.1 vsys1 XMLAPI dominic Never Never Total: 1 users admin@PA-200> clear user-cache all All entries in user cache removed! admin@PA-200> show user ip-user-mapping all IP Vsys From User IdleTimeout(s) MaxTimeout(s) --------------- ------ ------- -------------------------------- -------------- ------------- Total: 0 users admin@PA-200>
... View more
05-07-2015
02:50 PM
There is already an application signature for QUIC in the current app database. Dominic
... View more
12-01-2014
11:07 AM
1 Kudo
pa> show interface <interface> Interface management profile: allow_all ping: yes telnet: yes ssh: yes http: yes https: yes snmp: yes response-pages: no userid-service: no
... View more
12-01-2014
11:03 AM
I'm guessing your external interfaces are in the same zone. On the NAT Policy, try changing them to different zones, or configure a destination interface. Dominic
... View more
09-10-2014
11:50 AM
No issue. The only issue would be if you were trying to configure one of machines with a public IP address which had a DNAT configured for it. That would not work the DNAT would be applied and the machine would not be reachable from the outside. Dominic
... View more
09-10-2014
08:13 AM
ok nothing to do with NAT the V-wire is not working at all. I would start with checking the V-wire configuration and security policy.
... View more
09-10-2014
08:07 AM
"No Active Sessions…" There's your first problem. Doesn't look like the traffic is even hitting the VWIRE. In the 'show session all filter' command you used Pre-NAT IPs to filter correct? D
... View more
09-10-2014
07:51 AM
Page 21 shows you the objects.. no subnets When you look at the session is the NAT rule being matched and NAT not applied? Or not matched at all. To view the session live from the CLI use the following; pa> show session all filter source <ip> destination <ip> pa> show session id <id> Look for NAT rule Dominic
... View more
09-10-2014
07:37 AM
Understanding PAN-OS NAT Page 26, have you reviewed this yet? Dominic
... View more
09-10-2014
07:27 AM
You should be able to configure the /24 directly on an L3 interface and DNAT any of the IPs in that space to private IPs addresses in other zones. eg. Untrust 11.11.11.11/29 dmz1 22.22.22.1/24 dmz2 192.168.1.1/24 DNAT rule would read Untrust -> dmz1 -> DstIP 22.22.22.2 -> DNAT IP 192.168.1.2 Your security rule would read: Untrust -> dmz2 -> DstIP 192.168.1.2 Just make sure not to use the 22.22.22.2 address in your DMZ1 zone (; Dominic
... View more
08-29-2014
07:50 AM
Packet Flow in PAN-OS See this document. You'll notice prior to the NAT policy look up there's a forwarding lookup. The information applied from this forward look up is what is used to match the nat rule (important to note it is not used to match the security rule). Dominic
... View more
08-28-2014
01:28 PM
Pre-Nat rule matching will use a route look up to match the NAT rule prior to applying NAT. I'm guessing 10.10.2.10 would go our the internet zone. Dominic
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
