This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About ChrisRussell
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About ChrisRussell
01-17-2020
21Posts
9Likes
1Solution
Jan 17, 2020Last Visited
User
Activity
User
Profile
Latest posts by ChrisRussell
| Subject | Views | Posted |
|---|---|---|
| 4857 | 01-15-2020 08:54 AM | |
| 5113 | 11-14-2019 07:55 AM | |
| 8340 | 08-29-2017 07:34 AM | |
| 3519 | 07-17-2017 05:52 AM | |
| 2895 | 06-07-2017 07:05 AM | |
| 2905 | 06-06-2017 02:10 PM | |
| 3257 | 06-05-2017 09:26 AM | |
| 7197 | 05-24-2017 11:52 AM | |
| 2700 | 05-24-2017 07:58 AM | |
| 15273 | 05-22-2017 08:08 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 07-17-2017 05:52 AM | |
| 1 Like | 05-24-2017 11:52 AM | |
| 2 Likes | 05-19-2017 09:16 AM | |
| 3 Likes | 05-15-2017 07:48 AM | |
| 1 Like | 05-05-2017 08:34 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 2 Likes | |||
| 1 Like | |||
| 1 Like | |||
| 26 Likes |
Retired Member
|
by
Retired Member
|
User Badges
Community Statistics
| Member Since | 04-24-2017 11:53 AM |
| Date Last Visited | 01-17-2020 05:08 PM |
| Posts | 21 |
| Total Likes Received | 9 |
01-15-2020
08:54 AM
We solved this by separating all the log values onto individual lines. So hitting enter after each portion of the log. Definitely wasn't part of documentation but it works.
... View more
11-14-2019
07:55 AM
I'm currently sending FW logs to Azure Sentinel, via syslog over SSL to an r-syslog server with the Azure agent on the syslog server forwarding logs to Sentinel. I followed the documentation, format is BSD header with custom CEF format for the logs added. Using local4 facility on PA side as well as r-syslog server. Logs are getting in, but they are missing most of the key value pairs. Attached is a screen shot with basically all I'm getting. Has anyone successfully got the Palo Alto Networks FW logs into Sentinel and if so was there anything missing in the documentation or a step that needs to be added?
... View more
08-29-2017
07:34 AM
Do you have an SSL/TSL profile? There's a cert issue for sure with the SSL connection. So either the agent or the firewall are using out of date certs or some other mismatch.
... View more
07-17-2017
05:52 AM
1 Kudo
I have panorama running 8.0.2 with firewalls on 7.1.6 for now, no issues.
... View more
06-07-2017
07:05 AM
Thanks, that makes sense. I knew you could see the difference in counters from each time it was checked with > show counter global filter severity drop > show counter global filter delta yes severity drop But I didn't know the "rate" was tied to that as well. Thanks.
... View more
06-06-2017
02:10 PM
When one is looking at interface counters, does "rate severity" provide context for the "value"? Since in some cases 1000 drops is not a big deal while others it may be. name value rate severity category aspect description -------------------------------------------------------------------------------- session_state_error 27215 0 drop session pktproc Session state error session_dup_pkt_drop 838866 0 drop session resource Duplicate packet: Applies only for multi-DP platform with
... View more
06-05-2017
09:26 AM
You are 100% sure all the traffic is routed through the Palo?
... View more
05-24-2017
11:52 AM
1 Kudo
Cool, nice synopsis in the blog.
... View more
05-24-2017
07:58 AM
No, VM's are not free. You can get a 2 hour hands on test drive of one for free though. https://www.paloaltonetworks.com/events/test-drive.html
... View more
- Tags:
- vm
05-22-2017
08:08 AM
I know what you are thinking of in the ASA and I don't think there is a Palo equivalent. You can source your ping/traceroute and the system will tell you the logical response. > ping source <ip-address-on-dataplane> host <destination-ip-address> > traceroute source <ip-address-on-dataplane> host 8.8.8.8 But as everyone else stated this will only tell you basic networking/services and not check any of the layer 7 policies in place.
... View more
- Tags:
- ping
- traceroute
05-19-2017
09:16 AM
2 Kudos
I'm glad to know I have helped at least one person avoid that.
... View more
05-15-2017
07:48 AM
3 Kudos
Mine's minor. Somehow I missed this capability for too long. "set cli config - output - format set"
... View more
05-05-2017
08:34 AM
1 Kudo
Yeah, thats why i recommended sourcing pings from something other than whatever interface its pinging from now. ping source <pick an IP on palo side subnet> host <pick an IP on ASA side subnet> If pings throughtout the local subnet are reachable on the remote subnet then it has to be some sort of policy/services issue I'd think. I just always start at routing and work from there.
... View more
05-05-2017
07:43 AM
1 Kudo
I'd try to source the ping as something other than an interface, and then check static routes to the subnets on the other side. It sounds like the traffic doesn't know how to get across perhaps. I'd recheck the ASA's interesting traffic/subnets from the Palo are set right.
... View more
05-04-2017
01:46 PM
Everything you send out the firewall will get sourced as a public/external IP address. So based on its route out, it will take on that external/unstrusted interface IP. Firewall's will do that with all outbound traffic unless told otherwise.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
01-17-2020
05:08 PM
|
Likes From
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks