About AzerbaijanSupermarkets

AzerbaijanSupermarkets · ‎05-01-2019

Good day community. We are using PAN 820 and the management CPU isn't stable for the last 3-4 days. It's going from 10-15% to 70-100% and stays like this for some time and this happen several times a day. So, the GUI interface is freezing and also I noticed that connection to internet is freezing too. So, speedtest shows a normal speed, while browsers and etc are freezing. In cli I've noticed that some pan_task service is always 100%, also varrcvr, logrcvr and mgmtrcvr is going to 100%. Maybe some of you have noticed this situation earlier and can help me. Thanks in advance!

AzerbaijanSupermarkets · ‎04-03-2019

I figured out, that when I search for high-risk and block it like this, this issue happens. When I don't search and block it directly from the list, it works. Is it some kind of bug or anything else?

AzerbaijanSupermarkets · ‎04-03-2019

Good day, I have such kind of issue after PAN update to 9 version. Here are 5 allow categories, pre-defined categories (low-risk, medium-risk, high-risk and newly-registered-domains), which I want to make alert. But after change, all of categories became allow. Have any of you faced this kind of situation? Thanks in advance.

AzerbaijanSupermarkets · ‎02-05-2019

I just created a custom url category and added: Then I created decryption policy and dedicated not to decrypt this traffic. Thank you very much.

AzerbaijanSupermarkets · ‎02-05-2019

Good day! After the recent update Skype stop to function normally, I can upload, but can't download any file. Temporary solution was not to decrypt this category - "internet-communications-and-telephony". But I don't think that this is a normal solution. I've added skype, stun and web-browsing rules to allow skype traffic, but I have 2 Block Proxy rules. 1 block applications and the second one block url category. the policy with url-category is an issue with these 3 rules, created for Skype. What can be a problem? Maybe some of you can help me.

AzerbaijanSupermarkets · ‎11-21-2018

Thank you for your replies and links! I'll download and install agent on windows AD and test it. Yes, right now I have only agent only on firewall.

AzerbaijanSupermarkets · ‎11-19-2018

Hi, I avoid decryption for whole <private-ip-addr> category, as I could't make it only for anydesk. As I said earlier I tried many combinations.

AzerbaijanSupermarkets · ‎11-19-2018

Thank you for your help, Alex. Much appreciated. As I understand, captive-portal and global protect is used in layer 3 combination. But we use right now virtual wire and the change of design to layer 3 is our next year plan. You mean, multiple UIA instances on one AD? Multiple Users with same privileges or what? I'll use debug when this problem will happen again, but it doesn't happens often. So I'm waiting. Their accounts are locked, only mail is working and it's attached to my mail.

AzerbaijanSupermarkets · ‎11-19-2018

I tried may combinations, which were logged in URL filtering, but nothing worked. So I just added private-ip-address to no-decrypt policy.

AzerbaijanSupermarkets · ‎11-19-2018

I test both from local computer and the user-id agent. Probing is set for 20 minutes(default). I'll check logs the next time this issue will occur. Maybe there any alternative to wmi if it's so slow? Regardless Exchange server config: we have some users, me for example, which has 2-3 mail accounts. This are different people accounts, which leave the work and we need them. Their accounts are disabled, but mail accounts are working. It'll also create an issue I think.

AzerbaijanSupermarkets · ‎11-16-2018

Hi Otakar! I checked in Unified logs when I changed to wifi and mapping didn't happen, but there were no logs. And yes we user Exchange server. Should there be any config change or? Can you post some link or anything. Thanks in advance!

AzerbaijanSupermarkets · ‎11-16-2018

Alex, we gave this permissions to integrated user. I issued command you said and it's working. But when I change to wifi it doesn't work for some time. I have to restart or wait for 10-15 minutes.

AzerbaijanSupermarkets · ‎11-15-2018

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/configure-user-mapping-using-the-pan-os-integrated-user-id-agent#_75825 Hi ALex, probing and etc is configured as in this article. I just added now our local DATA network in include/exclude network (include - 10.0.0.0/8). The problem usually occurs on mornings.

AzerbaijanSupermarkets · ‎11-14-2018

Also it does the problem when I switch to WIFI network. It blocks by ip.

AzerbaijanSupermarkets · ‎11-14-2018

For other users it happens at different time, so I can't tell you exact time. But with me it happens almost every morning. I take my pc home at 6 PM and come at work at 9 AM. It makes about 15 hours. Also if some user turns off his pc for this time and turns it on in the morning the same problem occurs. I now made this time for 20 hours. Maybe you have another solution?

Member Since	‎10-26-2017 10:29 AM
Date Last Visited	‎06-04-2019 04:06 AM
Posts	33
Total Likes Received	2

Online Status	Offline
Date Last Visited	‎06-04-2019 04:06 AM

About AzerbaijanSupermarkets

high management CPU

Re: URL filtering issue

URL filtering issue

Re: Skype files download issue.

Skype files download issue.

high management CPU

Re: URL filtering issue

Re: Skype files download issue.

high management CPU

Re: URL filtering issue

URL filtering issue

Re: Skype files download issue.

Skype files download issue.

Re: mapping issue

Re: Anydesk issue.

Re: mapping issue

Re: Anydesk issue.

Re: mapping issue

Re: mapping issue

Re: mapping issue

Re: mapping issue

Re: mapping issue

Re: mapping issue

Network Security

Cloud Security

Security Operations

About AzerbaijanSupermarkets