About Dali_Chauhan

Hi,   Please check the below reasons for report error. Apart from this try to capture customised report for specific source and destination and test if same error is encountered.   Reasons could be   There is no security policy for the traffic because of which no traffic log is generated. If there is a security policy matching the traffic, the traffic log will be generated. However, the traffic log might not be generated instantly if the management plane is busy and excessive logging taking place on the device. So there would be instances where ACC logs and traffic logs are not in sync. The session's source and destination zone was the same which means it was automatically allowed and not logged   ... View more

Hi,   Please take a source IP address and check which policy it takes while going to the internet.   It seems traffic is passing through different policy which could be above Web-Filtering policy.   If above condition is true then change the priority of Web-filitering policy (place it above than any other internet policy) ... View more

Hi,   Please check HA status or apply sync to peer option in HA section.   +check connectivity with palo alto updates site ---   updates.paloaltonetworks.com +follow instruction which has been mentioned in the error ... View more

Hi,   solution for error  "failed to handle tdb_update_block"   Some customers running PAN-OS versions 7.0.x and earlier have experienced commit failures with a “TDB_BLOCK_UPDATE” error message after installing content 706 and 707. This issue   only   affects customers running PAN-OS 7.0.x and earlier and can be addressed by following the steps in the guide linked above. Customers who have not installed content version 706 or 707 are advised to skip directly to installing the latest version of Content Apps & Threats (version 708 or later).     follow this link for further solution   https://live.paloaltonetworks.com/t5/Customer-Resources/Guide-for-Resolving-TDB-UPDATE-BLOCK-Issues-Related-to-Content/ta-p/160631     ... View more

Hi,   Can you elaborate the scenario again as it seems very confusing. Ideally this should not happen . Please re-check configuration and priority on PA02 link interface ,  priority difference could be the reason for this.   You can also check HA logs to get the exact reason for this behavior of PA-HA.   ... View more

Hi,   This is not possible because two different gateways have different proxy IDs which will fail the phase 2 negotiation.   ... View more