About Nischal

We are stuck with Network Sign option not getting visible on Windows logon after installing GP Client ver 5.2.5. We expected the GP ver 5.2.x and above to create registry automatically as mentioned in following URL. Unfortunately , they are not getting created.   https://docs.paloaltonetworks.com/globalprotect/10-0/globalprotect-admin/globalprotect-apps/deploy-app-settings-transparently/deploy-app-settings-to-windows-endpoints/deploy-connect-before-logon-settings-in-the-windows-registry.html   Even  after running the custom msi package GP 5.2.5 that includes the 3 required register settings  the n/w sign option is not available. However, after automatically adding the registry by running following cmd we are getting the network sign option on windows logon. PanGPS.exe -registerplap   Is anyone else facing this problem? We believe installing GP client 5.2.0 above should save us from the hassle of manually adding registry entry or customizing the msi package     ... View more

I am setting up backup user-id agent 8.1.10-2 on Windows 2016 Standard server. I have given all the required access to the user-id agent admin account but its not working / refusing to start. I am using the same credential on existing UID agent 7.0.8-13 running on Windows 2008 R2 and it runs fine.   I attaching error messgae when starting UID service and corresponding log generated in UID logs.       UID Log   09/05/19 09:42:52:190[ Info 2357]: ------------Service is being started------------ 09/05/19 09:42:52:190[ Info 2364]: Os version is 6.2.0. 09/05/19 09:42:52:190[Error 675]: Cannot open config reg log key with error 5(Access is denied. )! 09/05/19 09:42:52:190[Error 2382]: Start error -1!! 09/05/19 09:42:52:190[Error 764]: Device listening thread stops timeout ... View more

I am in process of upgarding our Panorama (M-100) from 8.0.19 to 8.1.X code. I have gone through below URL for upgrade consideration and procedure to upgrade PAN. One thing i feel is critical to my enviroment is Template. We use regular template however 8.1.x code support template stack. As per online documention , conversion from template to template stack will be automatic. As its our production environment (90+ firewalls) and we cannot test (Azure PAN support 8.1.X only) i am bit skeptical how things will behave at time of migration.   Has anyone upgarded PAN from 8.0.X to 8.1.X ? If yes, did they face any issue? Please share your real time experience.   Here are the upgrade considerations: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-new-features/upgrade-to-pan-os-81/upgradedowngrade-considerations.html HOW TO UPGRADE PAN-OS AND PANORAMA https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRrCAK ... View more

While pushing policy from PAN to PA220 Firewall running 8.0.3 I am getting attached Error. We have around 6kplus object in that specific template. As per PA support, 8.0.X pan version comes with a precheck that will not allow commit till the object count be below 2500 value for PA220. My Query... 1. Does all objects get pushed from PAN irrespectively whether it's used or not, or only those objects are pushed which are part of security Policies? 2. I got the above error when pushing policy from PAN to PA 220 FW running 8.0.3 However, When i did a push from PAN to PAN220 running 8.0.7 i didn't receive same error. 3. Best way to clean up unused object without breaking anything? ... View more

We are planning to phase out PA200 firewall with PA220 . PA200 firewall is running PAN OS 7.1.14. PA 220 firewall comes preloaded with PAN OS version 8.0.X.   My concerns is, Can we directly import the firewall configuration  (device state) from PA200 to PA220 without any issue?  Or do we need to upgrade the PA 200 first to 8.0.x and then export and import this config to new PA220? ... View more