This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About W_Rafalski
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About W_Rafalski
15Posts
4Likes
1Solution
Last Visited
User
Activity
User
Profile
Latest posts by W_Rafalski
| Subject | Views | Posted |
|---|---|---|
| 686 | 12-16-2022 02:14 AM | |
| 605 | 05-10-2022 02:23 AM | |
| 997 | 05-05-2022 11:55 PM | |
| 2727 | 05-05-2022 03:43 AM | |
| 1056 | 05-05-2022 03:33 AM | |
| 2486 | 05-05-2022 01:07 AM | |
| 1993 | 05-04-2022 11:49 PM | |
| 2032 | 05-04-2022 12:16 PM | |
| 2514 | 05-04-2022 05:42 AM | |
| 2297 | 05-04-2022 04:48 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 05-05-2022 03:43 AM | |
| 1 Like | 05-05-2022 03:33 AM | |
| 1 Like | 05-05-2022 01:07 AM | |
| 1 Like | 05-04-2022 05:42 AM |
User Badges
Community Statistics
| Member Since | 06-09-2018 05:33 AM |
| Date Last Visited | |
| Posts | 15 |
| Total Likes Received | 4 |
12-16-2022
02:14 AM
Hello,
@Arnesh is right, External Dynamic Lists work exactly as You need.
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/external-dynamic-list
Going further, there is even nice tool called MineMeld which can collect feeds and prepare special lists for Your devices.
https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/minemeld
... View more
05-10-2022
02:23 AM
It's strange, you're right. In my opinion ERR_CONNECTION_REFUSED points clearly that something on your Mac block access to WebUI. It's local deployment. If you say web services works properly on PA-VM machine there is small chance for other option. Sometimes, what is not direct solution but can save your time, best what can be done, is just redeploy VM or reinstall VirtualBox.
... View more
05-05-2022
11:55 PM
So, if you say there is a network connection from both sides (ping) and you enabled http, try: 1) Open Web Gui using incognito mode (cache issues) 2) Open Web Gui using other web browser 3) Try to disable any browser extensions 4) Try to temporary disable local antivirus or firewall Check server-side: 5) https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POIHCA4 By the way, 9.0.x is out-of-date, do you really need to use this version ?
... View more
05-05-2022
03:43 AM
1 Kudo
Hello,
as far as I know "old" blueprint concerned 10.1 - I extended PCNSE in April and there weren't any questions about features which came with 10.2 ... so "new" blueprint will check your knowledge about Nebula, I believe.
... View more
05-05-2022
03:33 AM
1 Kudo
1) Try to get into through http. First turn it on: > configure # set deviceconfig system service disable-http no # commit Then connect through web browser http:// .... 2) What version of PAN-OS do you use ?
... View more
05-05-2022
01:07 AM
1 Kudo
So, special for you I've made a test with "Force Template Values" option on PAN-OS 10.1 and , what is interesting, it didn't work like it is said in "help" build into device:
1) object configured only locally - hasn't been changed at all, it didn't disappear.
2) object configured locally and on template - changed for template value.
3) object configured only on template - appeared on firewall.
It works as in https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/panorama-web-interface/panorama-commit-operations
Force Template Values
Overrides all local settings with objects defined in the templates or template stacks. This includes locally configured objects as well as objects pushed from Panorama that were locally overwritten. If an object is locally configured on the firewall, but is not configured in a template or template stack, then it remains unchanged on the firewall and is not deleted. The setting is disabled by default and must be enabled (checked) on each push from Panorama to managed firewalls.
If you push a configuration with Force Template Values enabled, all overridden values on the firewall are replaced with values from the template. Before you use this option, check for overridden values on the firewalls to ensure your commit does not result in any unexpected network outages or issues caused by replacing those overridden values.
I would recommend for you:
1) export firewall config to Panorama, modify it there and then push back
or
2) push templatestack values to firewall without "force template values" and then manually "revert" all locally configured values for those from Panorama
These are safe options.
... View more
05-04-2022
11:49 PM
"Invalid syntax" means you have a "typo", use "TAB" to complete command. Properly used command example: > ping host 1.2.3.4 you will "ping" address 1.2.3.4 from your management interface. You can try as well: > ping source <address of one of PA-VM interfaces> host <your host IP address> Did you check you accept untrasted certs in your web browser ?
... View more
05-04-2022
12:16 PM
So you need to do basic troubleshooting: 1. Be sure your PA-VM is running and finished booting process. 2. Try to ping PA-VM from host. 3. Try to log into PA-VM, then ping your host from CLI: > ping host <your host IP address> 4. Check if you don't block untrusted certificates ? New PA uses self-sign cert. By default you have to use https://
... View more
05-04-2022
05:42 AM
1 Kudo
Hello, 1) Local config has higher priority than pushed from Panorama templatestack. When you have settings that don't overlap, commit should be successful. When configs overlap, local config will be used, as long as it won't destroy integrity of machine config file - for example, when eth1/2 is used in other ae interfaces locally and in template - then whole commit will fail, so no changes will be applied. Remeber you have always "Validate template push" option in commit tab. You should export local config to Panorama, change it as you like and then push back. Second option is to manually rebuild local config on Panorama template, modify it and push. After successful commit, check if there any overriden settings locally on firewall and revert them - you will use then template settings.
2)Of course after changing tempalte stack for firewall you need to push and commit new configuration. Mark "Force Template Values" in Push and Commit -> Push scope selection tab. It overrides all local configuration settings and removes all objects on the selected firewall that don't exist in templatestack or that are overriden in local configuration. But be carefull before this operation.
... View more
05-04-2022
04:48 AM
Hello, you shouldn't use defaut gateway address, but PA-VM address. It's not the same. On VirtualBox your PA is normal VM, like Windows Server or Centos. You don't go to the Internet through PA. 1) Just reboot your PA-VM, click twice on it in VirtualBox-> you will get console and after booting there will be info about leased IP address. IP address you should use in web browser (always with https://) Second option: 2) Click twice on you running PA-VM in VirtualBox, log in using admin/admin credentials and then use command "show system info". Here is example: admin@anuragFW> show system info hostname: anuragFW ip-address: 10.21.56.125 netmask: 255.255.255.0 default-gateway: 10.21.56.1
... View more
05-04-2022
01:55 AM
Hello, I am afraid, that only resolution is to write a script using PA API:
1. GET Schedules objects;
2. Compare present time and schedules settings;
3. If shedule is epired, then send mail
I can't find proper parameter at least in Log Forwarding Profile or Custom Reports.
... View more
05-04-2022
01:12 AM
Hello, this error refers to proxy-ID setting. You've got 192.168.76.0/24 set on PA and 10.0.0.0/8 on Meraki. Proxy ID's need to be identical on both VPN peers for negotiation to be succesful. So, I would recommend to change this setting on one of peers.
... View more
05-04-2022
12:58 AM
Hello, I guess you've deployed PA-VM on VirtualBox ? By default MGMT interface of VM gets IP address from DHCP. 192.168.1.1 is for hardware only. I would open console of VM through VirtualBox - in the end of booting process there is info about what IP VM got. Did I understand your problem correctly ?
... View more
05-04-2022
12:43 AM
Hello, In my opinion, it depends on PAN-OS version you use. I would start from digital learning course:
Firewall 9.1 Essentials: Configuration and Management - unfortunatelly, I couldn't find newer version. You need to choose proper parts concerning networking. Then, I would check: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-networking-admin. It's complete PAN-OS networking guide for 10.1 and 10.2. For older versions you should read https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/networking .
... View more
Contact Me
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks