Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About Deepak_K
About Deepak_K
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
yesterday
29Posts
0Likes
0Solutions
Sep 19, 2020Last Visited
User
Activity
User
Profile
Latest posts by Deepak_K
| Subject | Views | Posted |
|---|---|---|
| 313 | 08-05-2020 01:52 AM | |
| 322 | 07-29-2020 04:07 AM | |
| 621 | 07-27-2020 02:13 AM | |
| 645 | 07-27-2020 01:48 AM | |
| 755 | 07-26-2020 01:02 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 | |||
| 1 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 05-08-2017 04:31 AM |
| Date Last Visited | yesterday |
| Total Messages Posted | 55 |
08-05-2020
01:52 AM
We are going to configure Active-Passive HA for PA3250. Primary and secondary device both at different locations , distance - 25 Kilometer. Location A ( Primary FW) --- L2 switch -------------P2P link 60 Mbps-------------------------L2 Switch -------Location B ( Secondary FW) For above scenario , can we use common P2P link for HA1 and HA2 ? We will use non-overlapping subnet for HA1 and HA2 connectivity . Which HA timer setting need to check for heartbeat and ping ? How we can check ms or ping response between primary and secondary firewall for HA1 and HA2 interface?
... View more
07-29-2020
04:07 AM
We are managing 4 location firewalls from Panorama. Panorama and one of the location is on 9.0.9-h1. Rest of the location firewalls are on 8.1.5. We have activated DNS security licence on that upgraded firewall which is running on panos 9.0.9-h1. We are using shared anti-spyware profile for all firewalls. If we enable DNS security setting in same anti-spyware profile from panorama and pushed in all devices , is there any impact or commit issue on firewalls which are running on 8.1.5 ?
... View more
07-27-2020
01:48 AM
@reaper Panorama not allowing to change quota for config logs. M200 running on PANOS 9.0.9-h1. We cannot add less than 32 MB. Even after adding 32 MB old logs are not purged. We can see logs from 19 July in Panorama > Config. Also there is not effect of command and max days count.
... View more
07-26-2020
01:02 AM
we have set retention period for 1 day , but still config logs are showing of last 5 days in Panorama. As per tac this is the bug as they are currently analyzing the file. Also tried to delete all config logs of Panorama through cli but no luck. Below command not worked on M200 running on 9.0.9-h1 to clear config log clear log [ acc | alarm | config | hip match | system | threat | traffic]
... View more
07-20-2020
11:03 PM
Two wildifire logs (16 July and 20 July ) are showing for same url with malicious verdict and action is allow. We have checked wildfire report of both logs , all information is same (same hash value , first timestamp seen is 7 July etc. ). If same url is identified in 7 July then why its showing in wildifre submission logs. Also why action is allow showing in second and third occurrence ?
... View more
07-08-2020
07:53 AM
Palo-Alto event “Dataplane under sever load” triggers when the CPU utilization is 100%. In Palo-Alto firewall is there any option to set threshold for the CPU Dataplane , means if CPU Utilization is to 90 or 80% it will generate alert in system logs and that we can use it to receive via email.
... View more
06-29-2020
01:35 AM
We want to add additional hard disk for logging in PA VM-500 deployed in ESXi. Do we require reboot at ESXi to compute new hard disk ?
... View more
06-24-2020
09:34 PM
We want to add additional hard disk for logging in PA VM-500. What is the maximum limit for hard disk size? Do we require to shutdown the PA VM Firewall while adding new hard disk ?
... View more
06-24-2020
05:47 AM
How we can configure HA2 for PA-VM Active passive deployment in ESXi. Can we use ip-address from mgmt network to use it for HA2 on both firewall. eg. 1.1.1.1 - Active firewall mgmt ip 1.1.1.2 - Passive firewall mgmt ip 1.1.1.3 - HA2 ip addres for Active firewall 1.1.1.4 - HA2 ip address for Passive firewall or do we require to take different subnet for HA2 synchronization ?
... View more
06-03-2020
09:57 PM
We already using sectigo cert for gp gateway *.example.com. We have purchased same wildcard certificate from reddit. Sectigo certficate is going to expire before that we want to test GP gateway on new certificate signed by reddit. We will configure GP on our secondary ISP and will create DNS host entry in our machine to test the same. Can we import same Common name certifcate of different vendor in PAN firewall ?
... View more
06-03-2020
05:43 AM
I n addition to distinguishing a client authentication configuration by an OS, you can further differentiate by specifying an authentication profile. (You can create a New Authentication Profile or select an existing one.) To configure multiple authentication options for an OS, you can create multiple client authentication profiles. authentication sequence profile which you have tried is the proper solution for your requirement. Multiple authentication profile we use to create multiple authentication profile with different OS type.
... View more
06-02-2020
02:45 AM
@RyanHenckel @RobinClayton please update if you got any solution. Currently for workaround we are using self-signed cert.
... View more
06-01-2020
12:51 AM
did you face any issue for global protect on 30 May 2020 due to sectigo cert ?
... View more
05-30-2020
03:21 AM
There is no workaround available for this vulnerability https://security.paloaltonetworks.com/CVE-2020-1981 A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shell to execute commands as a low privileged user and gain root access on the PAN-OS hardware or virtual appliance. We don't want to upgrade software to resolve this issue. Can we create password profile as workaround for this vulnerability point ? or please suggest any other alternative.
... View more
05-22-2020
02:45 AM
As per the attached image, its suggested to take maintenance window of 6 hours for Panorama upgrade activity. Also we cannot move ahead for firewall upgrade unless logging updated on Panorama. We are storing logs in Panorama-M200 and not using any device (log collector) to store the logs. can we ignore the recommended points. If its applicable to us how much time Panorama will be down?
... View more
05-22-2020
01:23 AM
In PAN OS 9.0 multiple URL category feature is added(high, medium and low risk category). Is there any issue if we only upgrade panorama to 9.0 and not a managed firewalls ? We should not face configuration or commit issue as panorama and firewall will be on different platform.
... View more
05-22-2020
12:07 AM
We are going to upgrade the PAN NGFW from 8.1 to 9.0 I have below queries case 1 : if we have below setting in URL filtering profile will be able to block facebook.com ? custom category_block* - facebook.com - block custom category_allow* - facebook.com - allow predefined category - social networking - block case 2 : if we have below setting in URL filtering profile will be able to block facebook.com ? custom category_block* - facebook.com - block predefined category - social networking - allow case 3 : if we have below setting in URL filtering profile will be able to block facebook.com ? custom category_allow* - facebook.com - allow predefined category - social networking - block case 4 : if we have below setting in URL filtering profile will be able to block facebook.com ? custom category_block* - facebook.com - block custom category_allow* - facebook.com - allow predefined category - social networking - allow I am asking this query because behavior is changed for url filtering override in PANos 9.0 https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-release-notes/pan-os-9-0-release-information/changes-to-default-behavior.html https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/upgrade-to-pan-os-90/upgradedowngrade-considerations.html
... View more
05-18-2020
02:54 AM
we are planning to reduce the capacity of Palo Alto VM firewall as we are not utilizing at the fullest and paying more. Will there be any issue from license point of you. we are planning to lower the capacity of CPU , RAM and storage on Palo Alto VM deployed on Azure will there be any impact on license ? .
... View more
05-18-2020
02:42 AM
We tested this, GP agents upgraded smoothly in transparent mode. no issue of admin credentials at backend.
... View more
05-16-2020
07:01 AM
We disallowed users to disable global protect app in Portal > app configuration setting , but still due to refresh connection option user able to disconnect GP and using local internet for browsing. We don't want to disable GP icon from system tray due to password change policy. Also enforce global protect for network resource option in app setting, didn't work properly. Please suggest any alternative solution in this case ?
... View more
05-06-2020
10:16 PM
I am referring to AD admin credential (service account which AD team use to approve software installation). If we enable GP upgrade in transparent mode might be GP upgrade will fail as the domain machines requires AD admin credentials to install the software. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clr1CAC
... View more
05-06-2020
03:55 AM
Global protect app require admin credential to upgrade in transparent mode? We want to upgrade agents from 4.0.2 to 5.0.8 in transparent mode. Can we upgrade from 4.0.2 to 5.0.8 directly ? Also user machine ask for admin credential when we install any kind of software. So we want to confirm before enabling transparent mode for agent upgrade.
... View more
03-15-2020
11:28 PM
1. Yes , its applied and we can see hit count. 2. We are able to access internet if we keep that ISP primary.
... View more
03-13-2020
10:35 PM
We have configured two ISP link in Shared gateway (sg) ISP 1 : sg1 ISP 2 : sg2 All LAN subnets are different Vsys. For internet access we are using shared gateway for all Vsys. We have configured pbf rule in each Vsys for accessing internet over ISP 2 , but not working. We followed below article , but its for Multi-vsys where lan and WAN using different vsys. There is no configuration mentioned for shared gateway. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClKsCAK Please help in this case.
... View more
03-04-2020
02:09 AM
* Ping and Telnet logs from DR Fortigate to Archsight server were to see in firewall. * In cli , session found with discard state for same traffic . After clearing that session issue resolved. -------------------------------------------------------------------------------- ID Application State Type Flag Src[Sport]/Zone/Proto (translated IP[Port]) Vsys Dst[Dport]/Zone (translated IP[Port]) -------------------------------------------------------------------------------- 2739248 syslog DISCARD FLOW 10.240.0.150[13652]/Router/17 (10.240.0.150[13652]) vsys1 10.0.6.12[514]/Server (10.0.6.12[514]) * As the syslog has long live session, all packets were dropping from Sat Jan 11 due to already established session which was in discard state. what would be the possibility ?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
yesterday
|
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
