Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About rob.burgoyne
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About rob.burgoyne
01-04-2018
50Posts
1Like
0Solutions
Jan 04, 2018Last Visited
User
Activity
User
Profile
Latest posts by rob.burgoyne
| Subject | Views | Posted |
|---|---|---|
| 808 | 07-25-2014 11:22 AM | |
| 1962 | 04-24-2014 03:57 PM | |
| 669 | 05-15-2013 01:09 AM | |
| 1552 | 05-09-2013 01:08 AM | |
| 1547 | 05-08-2013 06:48 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 05-15-2012 12:00 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 10-19-2010 05:38 PM |
| Date Last Visited | 01-04-2018 06:52 PM |
| Posts | 50 |
| Total Likes Received | 1 |
07-25-2014
11:22 AM
We have a pair of 5050s that we recently tried to upgrade, however we ran into an issue where once both of the PANs were upgraded they went into split brain. Its currently setup with some basic HA active/standby settings for 5.0. so I'm not sure why this would change in 6.0.3. We had to roll back to stay within our maintance window. Has anyone else had issues with HA after upgrading? Thanks,
... View more
04-24-2014
03:57 PM
I have a customer that is asking if its possible to assign static addresses to VPN users. This is required because of existing upstream firewalls that have ACLs tied to source IP addresses. This is done so that users can VPN into the network and then gain access to specific resources that are managed by a different group. I was wondering if anyone has ran into this scenario before and if there was a solution. I was also wondering if it was possible for VPN users to get DHCP from a DHCP server instead of the PAN Firewall. It doesn't look like this is possible but I thought I would check. Thanks,
... View more
Labels:
- Labels:
-
Configuration
-
Networking
-
User-ID
05-15-2013
01:09 AM
I am looking for this exact configuration. Were you able to get it working as expected using PBF?
... View more
05-09-2013
01:08 AM
Hey guys I am having an issue with a 2 x 10Gb (vPC) port-channel between two Nexus 5548s and a PAN 5050. I can get the port channel to come up on both switches, however I get around 25% packet loss when pinging over it. I have changed the port channel load balancing to src-dst-ip and have tried a couple different configurations on the cisco side with no resolve. As soon as I shut one side of the vPC down it cleans up. PAN: 5.1.5 Nexus: 6.0.2 Both sides of the vPC are configured the same and show up. description PAN5050 switchport mode trunk switchport trunk allowed vlan 128,135,159 channel-group 201 description PAN5050 switchport mode trunk switchport trunk allowed vlan 128,135,159 vpc 201 SW-1: 201 Po201(SU) Eth NONE Eth1/1(P) SW-2 201 Po201(SU) Eth NONE Eth1/1(P)
... View more
05-08-2013
06:48 PM
Hey guys I am having an issue with a 2 x 10Gb (vPC) port-channel between two Nexus 5548s and a PAN 5050. I can get the port channel to come up on both switches, however I get around 25% packet loss when pinging over it. I have changed the port channel load balancing to src-dst-ip and have tried a couple different configurations on the cisco side with no resolve. As soon as I shut one side of the vPC down it cleans up. PAN: 5.1.5 Nexus: 6.0.2 Both sides of the vPC are configured the same and show up. description PAN5050 switchport mode trunk switchport trunk allowed vlan 128,135,159 channel-group 201 description PAN5050 switchport mode trunk switchport trunk allowed vlan 128,135,159 vpc 201 SW-1: 201 Po201(SU) Eth NONE Eth1/1(P) SW-2 201 Po201(SU) Eth NONE Eth1/1(P)
... View more
Labels:
- Labels:
-
Networking
-
Troubleshooting
02-06-2013
05:04 PM
I am getting ready to move two 5050s into production and would like to know what release code to start with based on your recommendations. I assume that 4.1.10 would be the best choice, but 5.0 has been out for a little while now. I normally wait for about 4 or 5 releases before moving to the next revision. Thanks for the info.
... View more
Labels:
- Labels:
-
Configuration
-
Management
11-01-2012
01:11 AM
That sucks, it would be really nice to be able to easily filter routes based on Areas, not really how OSPF was designed but doesn't seem like it would be that hard for them to implement something like this.
... View more
08-10-2012
03:23 PM
Right so in this configuration, if 10.100.10.50 is going to anything in the (address group) it will get translated to 209.165.241.88. And then ANYTHING hitting 209.165.241.88 from the outside will get translated to 10.100.10.50 according to my lab. What I wanted was for the source of the inbound to be limited to only the (address group). To accomplish this I need a second destination NAT for it to work how I want. Thanks again for the help!
... View more
08-10-2012
11:58 AM
Ok so I was able to Lab this up and these are the results. Original Packet Source: 192.168.1.254 (INSIDE) Destination: SERVER GROUP (OUTSIDE) Source Static Translation 172.16.1.1 (OUTSIDE) Bi-Directional - Yes Ok so on workstation 192.168.1.254 I am able to ping all of the IP's in the server group and NAT looks to be working correctly outbound. If I try to ping anything other than the server group it fails as expected (since it doesn't match destination). However I am then able to ping (192.168.1.254) from anything via (172.16.1.1) inbound. I was hoping that it would only NAT it if the source was from the server group, which is not the case. So it looks as though I have to disable bi-directional and manually create a destination NAT sourced from SERVER GROUP destination 172.16.1.1
... View more
08-09-2012
10:56 AM
I have the following rule in the firewall and was wondering if I needed to create a second rule for the other direction or if the bi-directional option will take care of it for me. example source address :10.100.10.50 > destination address: FTPSERVERSGROUP > Source Translation: static-ip 209.165.241.88 bi-directional Basically if 10.100.10.50 is going to any of the IPs in the FTPSERVERSGROUP I want it to get translated to 209.165.241.88, and I also want the flip of anything coming from FTPSERVERSGROUP to 209.165.241.88 get translated to 192.168.1.10. I just want to make sure I don't need a source translation and then a destination translation or if the bi-directional option will take care of it....
... View more
- Tags:
- nat
Labels:
- Labels:
-
Configuration
-
Networking
08-02-2012
05:37 PM
Is there a way for PAN to auto-number policies, for example I would like to name my policy EXAMPLE-1, and have it enter the number sequentially for me. I can manually "name" them, but if someone inserts a rule or rules need to get moved around it gets pretty confusing. It would be nice if there was a number assigned to each policy line, or at least make a wildcard that would renumber itself eg EXAMPLE-*. I was just wondering before I submit a feature request. Tha
... View more
Labels:
- Labels:
-
Management
08-02-2012
10:20 AM
mp - 1.3.6.1.2.1.25.3.3.1.2.1 ----- value = 0.0 dp-0- 1.3.6.1.2.1.25.3.3.1.2.2 ----- value = 1 dp-1- 1.3.6.1.2.1.25.3.3.1.2.3----- value = not supported Hrm, can't seem to get it to work. Any tricks that I should know about?
... View more
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
