About JuergenHolzer

Hi,   if the firewall is configured with zone protection profiles and the setting "set system setting additional-threat-log on" is configured, i have noticed the destination zone is not correctly (in my example 8.8.8.8 is reachable over the outside zone) displayed in the threat logs:     I noticed it with version 8.1.8, 9.0.8, 9.1.2.   Does anybody has an explanation for it?   ... View more

Hi,   a customer has two PA VMs in the Azure cloud with internal loadbalancers configured. Unfortunately the DHCP server is also running there. In order to perform symmetric return a source nat is needed on the firewall. However this breaks the DHCP flow between DHCP relay and windows DHCP server. The DHCP server always replies to the relay agent (switch or on-premise firewall) address instead of the source IP which is the firewall ip. When the DHCP server sends the DHCP Offer message back to the relay agent address the packet is blocked, which is also described in this knowledge article:   https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClZUCA0   My question is why it is blocking the DHCP Offer, the protocol is UDP and shouldn't the firewall just see it as a new session?   Thanks     ... View more

Hi,   recently we configured Minemeld with Gridmeld to fetch SGT-IP bindings from Cisco ISE over RestAPI (PxGrid). Minemeld is pushing the SGT-IP Bindings correctly into the dynamic object groups. However, we noticed the IP to tag bindings are sometimes missing from the Palo Alto (checked with "show object registered-IP all") and 1 minute later added again. During this time we can find the affected IP-tag binding on the Minemeld UI (in the Indicator Field) and on the ISE node. Looks like it is not stable so far.   Has anyone implemented this and experienced similar issues? ... View more

Hi, the M.Learning Module gives me the Error "-1" if i try to process the csv log files:     The issue occurs on scheduled exported logs and manual exported logs. According to the guide https://live.paloaltonetworks.com/t5/Expedition-Articles/Machine-Learning-Configuration-Guide/ta-p/269034?attachment-id=8079 there should be a log file /tmp/error_logCoC generated. However this file does not exist, also creating and setup the correct permissions for www-data did not log anything. Also there are no errors in the dashboard.   I am using th Expedition Version 1.1.33 on ubuntu 16.04.06 server.   Has anyone experienced the same issue? ... View more

Hi, we have to build monthly PDF reports with nice graphs like Pie&Line Charts  for the management. Unfortunately PDF summary reports are the only one which contain graphs (despite the ACC Widgets) and are generated only everyday. Is it possible to generate them monthly?  Best Regards Juergen ... View more