Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About theonewhoknocks
About theonewhoknocks
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
02-04-2021
33Posts
3Likes
0Solutions
Feb 04, 2021Last Visited
User
Activity
User
Profile
Latest posts by theonewhoknocks
| Subject | Views | Posted |
|---|---|---|
| 1086 | 03-11-2020 10:40 PM | |
| 3269 | 10-13-2019 11:49 PM | |
| 3348 | 10-11-2019 06:10 AM | |
| 1889 | 10-11-2019 06:02 AM | |
| 4120 | 03-01-2019 03:14 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 03-11-2020 10:40 PM | |
| 1 | 12-03-2018 10:52 PM | |
| 1 | 03-05-2018 02:36 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 | |||
| 1 | |||
| 1 | |||
| 7 |
Retired Member
|
by
Retired Member
|
User Badges
Public Statistics
| Date Registered | 09-05-2017 12:19 AM |
| Date Last Visited | 02-04-2021 02:19 AM |
| Total Messages Posted | 36 |
| Total Likes Received | 3 |
03-11-2020
10:40 PM
1 Kudo
Hi @BrandonTice When you ping via the CLI, you need to specify the where the ping will source/come from. PA-220#ping source x.x.x.x host y.y.y.y If the source is unspecified, the firewall will use its default "management inteface ip" See article below for more details https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clk7CAC
... View more
10-13-2019
11:49 PM
I actually tried to upgrade the firewall to 8.1.9-h4, but I still got the same error code after the upgrade-reboot. Port's don't go UP and the auto-commit process fails. I'm still trying to reach out support from our vendor as we don't have direct support from PA. Thanks for the suggestions.
... View more
10-11-2019
06:10 AM
We upgraded the passive firewall on our Active/Passive HA firewalls from 8.0.19 to 8.1.0. After installing the 8.1.0 image, firewall rebooted. After that, ethernet interfaces as well as HA ports didn't go UP. We also got an error, that the auto-commit failed. "Error: Max. user groups used in policy 1067 exceeds capacity (1000)" Questions: 1. Ports didn't go up. Are they affected because the auto-commit failed? https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClQuCAK 2. Why we didn't get this error when we roll-back to 8.0.19 O.S.? I've raised the issue to our vendor, but still waiting for a feedback. Hoping from feedback from the experts here in live community.
... View more
10-11-2019
06:02 AM
@reaper "previous version" you mean 8.0.17? Or all 8.0.x family doesn't enforced this device limit? I've also encountered the same issue.
... View more
03-01-2019
03:14 AM
Currently, our palo alto only detects the following O365 applications *ms-office365 *outlook-web-online *sharepoint-online *ms-office365-base *ms-teams *ms-lync-online Do we need to enable SSL decryption so that it can detect other sub-applications? (ms-downloading, ms-uploading, ms-posting, etc.)
... View more
- Tags:
- O365
- sub-applications
02-13-2019
12:51 AM
Is it possible for each vsys to use a different HA port?
... View more
- Tags:
- ha
- multi-vsys
12-03-2018
10:52 PM
1 Kudo
Hi All, We want to block skype file transfer from our users. Checking on the application-list, I can only see Skype and Skype-probe. Here are my questions: 1. Is there a future plan to add additional skype sub-applications (skype-video-call, skype-file-transfer, etc.)? 2. Is there a work-around to block skype file transfer? Thanks and regards,
... View more
09-20-2018
03:11 AM
Hi @MikeC, We're running this setup on one of our sites. Both VR has default routes pointing to each individual ISP GW. VR1 has my internal LAN segments and ISP1 interface. VR2 has only ISP2 interface. VR1 has a backup default-route pointing to next VR (VR2)
... View more
07-26-2018
01:00 AM
Hi @VinceM, Which PAN-OS were you using when building this custom report? I cannot find "Repeat Count". I can only find "Sessions". I'm running PAN 7.1.16
... View more
05-22-2018
11:53 PM
Hi @Radmin_85 Here's a guide we used on our site-to-site VPN with two ISP. I just followed the guide step by step. Hope this helps you! https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-a-Palo-Alto-Networks-Firewall-with-Dual-ISPs/ta-p/59774
... View more
05-09-2018
02:29 AM
Hi @jmarchant, from the switch perspective can you see that the port is (UP/UP)? Have you tried manually adding the mac address on the switch mac table?
... View more
05-01-2018
08:06 AM
@OtakarKlier Port 1/1 - ISP B Port 1/2 - ISP A ping 'port 1/1 IP' host 'ISP-A DNS IP' --- success ping 'port 1/2 IP' host 'ISP-A DNS IP' --- fail
... View more
05-01-2018
07:33 AM
@OtakarKlier no worries. Port Connected to ISPA is in up state. No logs is generated as I am using the eth1/2 as the source of the ping to reach the ISP-A DNS Server. Routes in the forwarding table: Default Route is via next VR (ISPB VR) ISP-A DNS Server via ISP-A Gateway
... View more
05-01-2018
07:06 AM
Hi @OtakarKlier, No Dynamic Routes between VR's. Adding the specific /32 static route did not resolve the problem. Path Monitoring status is stil down.
... View more
05-01-2018
04:06 AM
Update: Stand-alone test worked fine. Can reach the internet and the DNS of ISPA (monitored IP in path monitoring of default route) So I guess the problem is on the PA? Anything that I need to double check? Checking from previous logs, firewall was able to detect path failure and was also able to recover.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-04-2021
02:19 AM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
