Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About BoDollis
About BoDollis
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
02-04-2020
05:59 PM
Are Parent or Grandparent device groups not supposed to be able to have Rule Usage tracking? My individual devices have rule usage (Hit Count, Last/First Hit), Child device groups have Rule Usage (Used or Unused), but my Parent and Grandparent device groups all have the "em-dash" for rules that do indicate having hits at the child and individual device level.. Policy Rule Hit Count has been enabled in Panorama since before this hierarchy was created I believe. PanOS 8.1.x Em-dash (—) —When no firewalls in the device group—to which you pushed the policy rule—have Policy Rule Hit Count enabled or available for Panorama to determine the rule usage. Monitor Policy Rule Usage https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/manage-firewalls/device-monitoring-on-panorama/monitor-policy-rule-usage.html
... View more
11-27-2019
08:45 PM
I am trying to determine how to change the Site Access of the new URL categories (cryptocurrency and grayware). By default, they are Allow, and I want them to be Alert. I can do this via CLI w/ the command from config mode below. set shared profiles url-filtering TEST-ONLY-02 alert grayware What I do not understand is that once changed, I can not change it back via CLI w/o the Site Access being in the default of Allow set shared profiles url-filtering TEST-ONLY-02 block grayware Server error : block 'grayware' is already in use I do not think I need to do this now, but I would like to know how to change a Site Action via CLI. Ultimately, my current problem is changing the new crypto and grayware to block in many URL filtering profiles.
... View more
11-24-2019
01:15 PM
Am I correct that the naming scheme is considered Major Version . Feature Release . Maintenance Release - hotfix? 8.1.6-h3
... View more
11-15-2019
06:09 AM
I can tag a rule via CLI, but how can I ask Panorama to show me rules tagged with tag-name? set device-group DG-Name security rules "Existing-rule-name" tag tag-name
... View more
- Tags:
- PanOS CLI tag show
11-07-2019
12:33 PM
Is it possible to create (scheduled) rule usage reports in PanOS 8, ideally from Panorama on a per device group basis? I see the rule usage data present, seems silly there wouldn't be a capability to query against it. Rules (not) used withing last X days?
... View more
- Tags:
- logs
- report
- rule usage
09-12-2019
04:14 PM
Either one works for me, although it seems like if the query can be done via LDAP syntax it would be more efficient and precise. I did notice that the rule will accept LDAP syntax, but have not tested it beyond a commit validation. More of an academic q: really. Thank you.
... View more
09-12-2019
10:15 AM
In the group mapping UserID template, we use LDAP syntax (CN=...., OU=...), but in rules, I have always seen Source User expressed in lanman syntax, Domain\User or ...\Group. Is it possible to use the LDAP syntax in the rule as well, and is there and advantage either way?
... View more
- Tags:
- ldap syntax
- user-id
04-04-2019
10:48 AM
We have that not selected, unchecked. When I change a group address object that is only used on 1 device group, all device groups get the update, even though they do not use the object. It may be that the object is there for legacy reasons from before when you mentioned was a feature. Since the object is there from then, the object gets the update. I will have toi create a new object and see if brand new objects oberrve the same behaviour.
... View more
04-04-2019
10:37 AM
Is there a way to prevent (address) objects created in Panorama from deploying to firewalls/device-groups where they are unnecessary?
... View more
- Tags:
- object Panorama
04-04-2019
10:34 AM
Export the objects via CLI to text, you can use that to create a script to create or remove them on whichever host you like.
... View more
10-15-2018
07:23 AM
Is it possible to have PanOS firewalls send LEEF syslog to to 1 destination, while also sending raw syslog to a different destination?
... View more
10-03-2018
11:05 AM
That worked nicely, thank you. FWIW, on Panaroma, need to specify "shared". # delete shared address <address object> tag <tag>
... View more
10-03-2018
08:01 AM
Static tagging via CLI is pretty straight forward, but how to remove a static tag via CLI?
... View more
04-18-2018
12:32 PM
I would LOVE to create an application/AppID for SSh on an alternate port, e.h.10022 rather than 22. I thought cloning the ssh AppID would be the way, but Clone is greyed out and unavailable. Creating or adding an Application seems straight forward until I get to the Signatures tab. Can someone give me some guidance on this please?
... View more
01-24-2018
06:40 PM
I should know this, but how to see deltas and the user name that committed them?
... View more
User
Activity
User
Profile
Latest posts by BoDollis
| Subject | Views | Posted |
|---|---|---|
| 180 | 02-04-2020 05:59 PM | |
| 297 | 11-27-2019 08:45 PM | |
| 317 | 11-24-2019 01:15 PM | |
| 326 | 11-15-2019 06:09 AM | |
| 581 | 11-07-2019 12:33 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 | |||
| 2 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 12-28-2017 06:49 AM |
| Date Last Visited | |
| Total Messages Posted | 15 |
Contact Me
Likes Given To
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
