About Edwardo

@scotchoaf Hello threre,   I am trying to use this skillets for testing purposes on PAN-OS 9.0.5. After entering information I receive the following error:   I see that it creates the tunnel interface and attach it to the untrust interface, however it stops there.. Do I have to create the IKE Gateway, IKE crypto and Ipsec crypto? How I can troubleshoot this?   Thanks in advance. ... View more

Yep, configured some days ago and its working 🙂 ... View more

Thanks! When the version 1.11.12 will be available? ... View more

Thanks for the prompt reply. I see, I will stick with the one interface approach to have the versatility to change to an HA model if needed in the future.   Thanks again! ... View more

Hello @jmeurer,   Thank you so much for your help!! Looks like the issue was that I did not enabled IP forwarding when I created the Azure NIC for the Palo Alto second trust interface. I also added the interface name for th estatic routes on the Palo Alto VR for better reading.   Regarding the model that you are telling me, what will be the recommended arquitecture if I only have one firewall?? All models that I have found on Palo alto documentation seems to be for HA.. Also, is there a use case where I have one firewall that I will want to have load balancers and/or other Azure resource?    Is the model that you told me for HA, or it can be applied to a single firewall? Just want to know possible deployments. I only have one subnet with aroudn 20 servers that I want to protect with a single firewall.   Thanks again! ... View more

Here is the log:   expedition@Expedition:~$ sudo tail -100 /tmp/error [sudo] password for expedition: [6]=> string(3) "exe" [7]=> string(5) "flash" [8]=> string(3) "hlp" [9]=> string(3) "hta" [10]=> string(3) "msi" [11]=> string(20) "Multi-Level-Encoding" [12]=> string(3) "ocx" [13]=> string(3) "pif" [14]=> string(3) "rar" [15]=> string(3) "scr" [16]=> string(3) "tar" [17]=> string(7) "torrent" [18]=> string(3) "vbe" [19]=> string(3) "wsf" } } ["direction"]=> string(4) "both" ["action"]=> string(5) "block" } [1]=> object(SimpleXMLElement)#108 (5) { ["@attributes"]=> array(1) { ["name"]=> string(31) "Continue prompt encrypted files" } ["application"]=> object(SimpleXMLElement)#74 (1) { ["member"]=> string(3) "any" } ["file-type"]=> object(SimpleXMLElement)#107 (1) { ["member"]=> array(2) { [0]=> string(13) "encrypted-rar" [1]=> string(13) "encrypted-zip" } } ["direction"]=> string(4) "both" ["action"]=> string(8) "continue" } [2]=> object(SimpleXMLElement)#100 (5) { ["@attributes"]=> array(1) { ["name"]=> string(24) "Log all other file types" } ["application"]=> object(SimpleXMLElement)#107 (1) { ["member"]=> string(3) "any" } ["file-type"]=> object(SimpleXMLElement)#74 (1) { ["member"]=> string(3) "any" } ["direction"]=> string(4) "both" ["action"]=> string(5) "alert" } } } ["description"]=> string(94) "strict - change as needed. zip and rar allowed with continue. allow PE and .cab for ms-updates" } } } bool(false) Fatal error: Uncaught Exception: Wrong type of input parameters, expected SimpleXMLElement key:value: in /var/www/html/libs/xmlapi.php:1746 Stack trace: #0 /var/www/html/libs/common/xml/panosxml.php(1458): SimpleXMLElement_append(Object(SimpleXMLElement), false) #1 /var/www/html/bin/configurations/output/output_function.php(274): xml_profiles(Object(SimpleXMLElement), Array, Array) #2 /var/www/html/bin/configurations/output/output_function.php(25): generate_xml(Array, '4') #3 {main} thrown in /var/www/html/libs/xmlapi.php on line 1746 I am able to generate a snapshot with only best practice remediation, but not with the remap of interfaces nor the security profiles. I will try just doinf the remap since based on the error looks like something is wrong with the profiles. ... View more

Thanks, but I checked it and it looks fine.   @alestevez: I upgrade to the latest version and now instead of just hanging, it logs me out of the platform GUI! I also noticed, is the PA-3260  model supported by the Expedition VM? I dont see listed it, no rthe PAN-OS 8.1 version which the PA-3260 comes from by default from Palo Alto.   Please advise as I dont have any more type of troubleshooting at my disposal right now...  ... View more

@bagherib Thanks for the reply.   What you mean by services? If you mean the status, is still on:     Please help.. Also, the response pages does not want to export to the base config: It does not let me to migrate the response pages and I need to.. they are being in use.   ... View more

Hi!   @reaper I remember this being great links to start learning. However, all links here are broken... Looks like there are in the process of migrating it to a knowledge base. It justs redirects to https://live.paloaltonetworks.com/  and if you click on the getting started series, well it redirects again back here. Do you have a link where I can have all the links of this information?   Thanks in advance. ... View more

Thanks for the information! ... View more