This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
About theonewhoknocks
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About theonewhoknocks
02-04-2021
36Posts
3Likes
0Solutions
Feb 04, 2021Last Visited
User
Activity
User
Profile
Latest posts by theonewhoknocks
| Subject | Views | Posted |
|---|---|---|
| 1877 | 03-11-2020 10:40 PM | |
| 4807 | 10-13-2019 11:49 PM | |
| 4890 | 10-11-2019 06:10 AM | |
| 2594 | 10-11-2019 06:02 AM | |
| 6318 | 03-01-2019 03:14 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 03-11-2020 10:40 PM | |
| 1 Like | 12-03-2018 10:52 PM | |
| 1 Like | 03-05-2018 02:36 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 7 Likes |
Retired Member
|
by
Retired Member
|
User Badges
Community Statistics
| Member Since | 09-05-2017 12:19 AM |
| Date Last Visited | 02-04-2021 02:19 AM |
| Posts | 36 |
| Total Likes Received | 3 |
03-11-2020
10:40 PM
1 Kudo
Hi @BrandonTice When you ping via the CLI, you need to specify the where the ping will source/come from. PA-220#ping source x.x.x.x host y.y.y.y If the source is unspecified, the firewall will use its default "management inteface ip" See article below for more details https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clk7CAC
... View more
10-13-2019
11:49 PM
I actually tried to upgrade the firewall to 8.1.9-h4, but I still got the same error code after the upgrade-reboot. Port's don't go UP and the auto-commit process fails. I'm still trying to reach out support from our vendor as we don't have direct support from PA. Thanks for the suggestions.
... View more
10-11-2019
06:10 AM
We upgraded the passive firewall on our Active/Passive HA firewalls from 8.0.19 to 8.1.0. After installing the 8.1.0 image, firewall rebooted. After that, ethernet interfaces as well as HA ports didn't go UP. We also got an error, that the auto-commit failed. "Error: Max. user groups used in policy 1067 exceeds capacity (1000)" Questions: 1. Ports didn't go up. Are they affected because the auto-commit failed? https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClQuCAK 2. Why we didn't get this error when we roll-back to 8.0.19 O.S.? I've raised the issue to our vendor, but still waiting for a feedback. Hoping from feedback from the experts here in live community.
... View more
10-11-2019
06:02 AM
@reaper "previous version" you mean 8.0.17? Or all 8.0.x family doesn't enforced this device limit? I've also encountered the same issue.
... View more
03-01-2019
03:14 AM
Currently, our palo alto only detects the following O365 applications *ms-office365 *outlook-web-online *sharepoint-online *ms-office365-base *ms-teams *ms-lync-online Do we need to enable SSL decryption so that it can detect other sub-applications? (ms-downloading, ms-uploading, ms-posting, etc.)
... View more
- Tags:
- O365
- sub-applications
02-13-2019
12:51 AM
Is it possible for each vsys to use a different HA port?
... View more
- Tags:
- ha
- multi-vsys
12-03-2018
10:52 PM
1 Kudo
Hi All, We want to block skype file transfer from our users. Checking on the application-list, I can only see Skype and Skype-probe. Here are my questions: 1. Is there a future plan to add additional skype sub-applications (skype-video-call, skype-file-transfer, etc.)? 2. Is there a work-around to block skype file transfer? Thanks and regards,
... View more
09-20-2018
03:11 AM
Hi @MikeC, We're running this setup on one of our sites. Both VR has default routes pointing to each individual ISP GW. VR1 has my internal LAN segments and ISP1 interface. VR2 has only ISP2 interface. VR1 has a backup default-route pointing to next VR (VR2)
... View more
07-26-2018
01:00 AM
Hi @VinceM, Which PAN-OS were you using when building this custom report? I cannot find "Repeat Count". I can only find "Sessions". I'm running PAN 7.1.16
... View more
05-22-2018
11:53 PM
Hi @Radmin_85 Here's a guide we used on our site-to-site VPN with two ISP. I just followed the guide step by step. Hope this helps you! https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-a-Palo-Alto-Networks-Firewall-with-Dual-ISPs/ta-p/59774
... View more
05-09-2018
02:29 AM
Hi @jmarchant, from the switch perspective can you see that the port is (UP/UP)? Have you tried manually adding the mac address on the switch mac table?
... View more
05-01-2018
08:06 AM
@OtakarKlier Port 1/1 - ISP B Port 1/2 - ISP A ping 'port 1/1 IP' host 'ISP-A DNS IP' --- success ping 'port 1/2 IP' host 'ISP-A DNS IP' --- fail
... View more
05-01-2018
07:33 AM
@OtakarKlier no worries. Port Connected to ISPA is in up state. No logs is generated as I am using the eth1/2 as the source of the ping to reach the ISP-A DNS Server. Routes in the forwarding table: Default Route is via next VR (ISPB VR) ISP-A DNS Server via ISP-A Gateway
... View more
05-01-2018
07:06 AM
Hi @OtakarKlier, No Dynamic Routes between VR's. Adding the specific /32 static route did not resolve the problem. Path Monitoring status is stil down.
... View more
05-01-2018
04:06 AM
Update: Stand-alone test worked fine. Can reach the internet and the DNS of ISPA (monitored IP in path monitoring of default route) So I guess the problem is on the PA? Anything that I need to double check? Checking from previous logs, firewall was able to detect path failure and was also able to recover.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-04-2021
02:19 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks