This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About cchaffee
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About cchaffee
01-26-2021
7Posts
1Like
0Solutions
Jan 26, 2021Last Visited
User
Activity
User
Profile
Latest posts by cchaffee
| Subject | Views | Posted |
|---|---|---|
| 1539 | 10-22-2020 09:25 AM | |
| 4603 | 01-22-2019 01:09 PM | |
| 4774 | 01-22-2019 09:42 AM | |
| 4791 | 01-21-2019 11:32 AM | |
| 5124 | 01-08-2019 03:39 PM | |
| 2816 | 07-27-2018 02:55 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 07-27-2018 02:55 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 3 Likes | |||
| 1 Like | |||
| 4 Likes | |||
| 1 Like | |||
| 23 Likes |
User Badges
Community Statistics
| Member Since | 07-03-2017 06:29 AM |
| Date Last Visited | 01-26-2021 12:04 PM |
| Posts | 7 |
| Total Likes Received | 1 |
10-22-2020
09:25 AM
Notification emails that I normally get from the Live community are failing DMARC checks which is causing them to be quarantined. Their DKIM appears to be invalid and SPF is also failing. This has been happening for probably a week or so. I've been unsuccessful in reaching anyone at Palo Alto to get this resolved. If anyone here is able to assist, that would be appreciated. dkim=none (invalid DKIM record) header.d=livehelp.paloaltonetworks.com header.s=khoros2020 header.b=H/4tWxYC;
dmarc=fail reason="No valid SPF" header.from=livehelp.paloaltonetworks.com (policy=quarantine);
spf=softfail (34.218.116.3 is neither permitted nor denied by domain of live@livehelp.paloaltonetworks.com) smtp.mailfrom=live@livehelp.paloaltonetworks.com
... View more
01-22-2019
01:09 PM
I’ve seen this behavior on devices running 8.0.13, 8.1.3 and 8.1.4.
... View more
01-22-2019
09:42 AM
Yes, I'm pretty sure. I used the API to pull the merged config directly from the firewall, and it definitely does not include the security rules from Panorama. I get the same results from the cli command 'show config merged'. However, when I log into the device's web console, I can see all the rules that came from Panorama so I'm certain they're getting pushed to the device.
Btw, I can run 'show config pushed-shared-policy' on the firewall and all of the policy objects from Panorama are displayed. They just do not appear in the merged output.
... View more
01-21-2019
11:32 AM
Unfortunately it seems even the merged configuration retrieved from the FW is not the full picture. It seems to be missing the security rules that come down from Panorama; only security rules that are defined locally show up in the merged config.
It would be great if we could have a tool capable of running a comprehensive BPA on devices where the config is partly local and partly from Panorama. For now, I'm thinking it might be possible to run separate BPA's for the merged device config and the Panorama config, and then take the results from both to get a more complete picture. If there's a better approach, I'm definitely interested in hearing about it.
... View more
01-08-2019
03:39 PM
I'm having some trouble with Best Practices analysis and hoping someone here can confirm the functionality.
I have many devices managed by Panorama. Their configuration is built through a combination of some local device configuration and policies, plus settings from templates and device groups in Panorama. I've imported all devices including Panorama into a project, but when I run the Best Practices analysis it seems to only consider the Panorama config. I don't see the settings or policies from the local device configs in the analysis results.
I believe this worked for me in the past, perhaps there is some trick I'm just forgetting. I've tried toggling through devices in the bottom toolbar but it seems to have no effect when on the Best Practices tab. Can anyone else confirm if BPA is working for them with a combination of Panorama and local device configurations?
Expedition 1.1.2 / BP 3.6.3
... View more
07-27-2018
02:55 PM
1 Kudo
Is there a way of telling Expedition to process all avaliable logs from the cli or on a schedule?
I already have scripts that can pull logs over to my expedition machine on a nightly basis. It would be great if Expedition could automatically import those rather than me having to log in, select the devices, and click on Process Logs every day.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
01-26-2021
12:04 PM
|
Latest Tags
No tags yet
Likes Given To
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks