Hello everybody! PAN OS build 9.0.3-h3.   According to the PAN documentation the "External Dynamic Lists" (Object-> External Dynamic Lists) )are supposed to use "External Dynamic Lists Service Route" (Device-> Setup -> Services -> 'Service Route Configuration').   This doen't seem to be the case since any changes in that area have no effect for EDL. It seems that 'URLS Updates' Service Route is responsible for any entry withing an EDL.   Changing that specific Route does fix our problem but breaks the native PAN melicoious/high risk/ bulletproof IP fetching system. Which is not the way to go.   Our EDL needs to access an internal only host. Keeping the default settings, it tries to use an external route to access the specific host. We need to change the Route to use the internal interface but without breaking the native PAN Dynamic IP Lists. ... View more

Hey,   I just installed  Ubuntu 16.04 to set up MineMeld according to these instructions: https://live.paloaltonetworks.com/t5/MineMeld-Articles/Manually-Install-MineMeld-on-Ubuntu-Server-16-04/ta-p/253336   Once running  sudo apt install -o Dpkg::Options::="--force-overwrite" -y minemeld I get the following Error:   E: Unable to locate package minemeld When running  uname -a to check if I have the 64bit version installed I get: Linux MINEMELD 4.4.0-164-generic #192-Ubuntu SMP Fri Sep 13 12:02:50 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux   I couldn't find any other thread going into this issue. The ubuntu .iso I downloaded was labeled "ubuntu-16.04.6-server-amd64" Best regards  husetech ... View more

Hello @all, I would like to get a stats-dumb file which will be later used to generate an SLR report. Since the timeframe (1 Week) via the PA GUI is not long enough for us, I use CLI with the following command to generate the file:   tftp export stats-dump start-time equal 2018/12/01@10:00:00 end-time equal 2018/12/31@10:00:00 to 10.164.15.27   !info: 10.164.15.27 is one of the AD and seemes to have a working connection to the PA, that's why I am using this server   When firing off this command it first seems to work but the generated file remains zeroed out:   After waiting for the timeout the final Log of PumpKIN looks like this:   What did I try to solve this issue? 1. Used several TFTP software, always getting the same result. 2. deactivated the AV + FW on the windows server 3. edited the security settings on the TFTP folder to allow everybody every access   Help is very much appriciated. ... View more

I am having a weired issue with a PaloAlto and a Telekom Router.   I configured a specific client address to always use a second Router (with internet connection) to communicate to the WAN. Everything on the PaloAlto looks good to me but when I plug-in the Telekom Router into the configured interface port of the Paloalto I cannot access the Routers webpanel  nor do I get an internet connection. Once I unplug the Cable from the interface port I have internet and can access the routers webpanel again. The client i try to access the webpanel is directly connected to one of the routers ports.   It's like there is too much traffic coming from the PaloAlto towards the router, which is according to the configuration not possible. Now I want to actually check if there is a lot going on on that interface and try to figure out why the webpanel is never reachable when plugged into the FW.   Thanks in advance! ... View more