About Shadow

thank for the heads up. ... View more

Hello Astardzhiev,   thank you for the response. I will certainly look into the Beacon training. however, for the license (trial), od I need to go through our pre-sales guys or from the PA. there was a post on live PA about it and with an email, sish, I didn't bookmark it ... View more

thank you very much, this will help me to create multiple interfaces.   ... View more

Hi @Shadow ,   Happy to help. I believe that to be the issue as well. Unfortunately, only the superuser of the account will be able to add you to your company account. I would ask your network/security team lead. Hope you can get this settled soon! ... View more

Hello Metgaz, thank you for your time & for the last two links as well. KR ... View more

Hi Tom, Thank you very much. I did read that link and was looking for a multiple interface solution. As you confirmed what I was thinking will proceed with this. ... View more

Ignore the above pls, I just forgot to allow DNS 🙂 ... View more

@MP18  This simply means that there are 122 clients that the firewall is unable to get user-id information for. Just because you have 122 users as unknown doesn't mean that you'll run into the issue mentioned in the article, but it means you potentially could if you cross the 100 sessions/s metric.  ... View more

I did come across this solution, to the description I have to add, once you log in there was no prompt ">" + if you run some show commands there were no output(black screen). with help of TAC and tanks to Pradip, following was discovered and fixed   ==============Knowledge share=================================== As the configuration of the ESXI is same and it does not seems to be a VM issue. >> We are not able to access Panorama GUI. >>We are able to get CLI but whenever we type command it does not return any output or error. >> We tried restarting Panorama and it did not work. >> We visited MAINT mode and tried reinstalling the PAN OS and tried reverting to older PAN OS both options did not worked. configd.log -------------- <-------SNIP------> Error: pan_mongo_output_error(pan_mongo.c:515): [MongoDB Failure] mongo_insert failed: 18446744073709551615(0), <-------SNIP------> Error: pan_cfg_mongo_clear_unfinished_jobs(src_cms/pan_cfg_mongo_tables.c:15632): Failed to insert record for key   + We ran the commands on root shell to repair the MongoDB. # mongodump -d pancfg -o /tmp/db_backup # mongo > use pancfg > db.dropDatabase() > exit # cd /tmp/db_backup # mongorestore --drop -d pancfg pancfg (you must run this from /tmp/db_backup) # mongo > use pancfg > db.repairDatabase() + We tried to SSH to the device, connect to WebUI and do a commit. All of them were successful ================================ PLEASE REMEMBER, by using the above commands you are responsible for your firewall,Palo Alto/TAC engineer Pradip or I are not responsible for your mess up   ... View more

@Shadow wrote: Both, thank you for the response. what I meant by cluster, you have two clusters, 1-active the other standby   on active cluster you have minimum of 2x devices which are active, and the same amount of devices on the standby cluster all traffic see as the Active cluster as primary. all active devices in the primary(active)cluster, their standby is on the standby cluster.  this design is used for very sensitive traffic, example forex market, where milliseconds count.   anyway thanks, radio/ScottF, will check the link too with load balance(but that's not the design I am after)   Like what @ScottF already mentioned what you're wanting to do is essentially "front end" your "FW service" with a load balancer that validates if the 2 pairs of FW environments are functional and routing traffic to each service appropriately.    As you mentioned forex, it seems you'd be better off looking for hardware built for that space. ... View more