Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About dyoung
About dyoung
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
09-11-2019
81Posts
11Likes
11Solutions
Sep 11, 2019Last Visited
User
Activity
User
Profile
Latest posts by dyoung
| Subject | Views | Posted |
|---|---|---|
| 1235 | 09-16-2015 08:37 AM | |
| 1278 | 09-08-2015 05:15 AM | |
| 2838 | 08-12-2015 07:03 AM | |
| 2871 | 08-11-2015 03:07 AM | |
| 1446 | 02-12-2015 01:12 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 07-11-2011 08:47 AM | |
| 1 | 03-05-2013 12:19 AM | |
| 1 | 11-17-2011 04:40 AM | |
| 1 | 07-21-2011 05:45 AM | |
| 1 | 11-15-2011 05:52 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 | |||
| 1 | |||
| 6 |
User Badges
Public Statistics
| Date Registered | 01-21-2011 12:50 AM |
| Date Last Visited | 09-11-2019 09:55 AM |
| Total Messages Posted | 81 |
| Total Likes Received | 11 |
09-16-2015
08:37 AM
Hi Phil, Thanks for your reply. The strange thing is that the AV updates always got pushed to the peer device and installed fine. I think our situation was the opposite way around to yours in that the peer device was reported to be running more recent AV defs than our active unit. Fortunately though this issue seems to have gone away since the weekend. We haven't made any changes or rebooted the unit, it just started working again. Very odd. Thanks, Dave
... View more
09-08-2015
05:15 AM
Hi all, I have a HA pair (A/P) of PA-500s and one of the devices seems to be giving mixed messages about the version of the AV definitions in use. This has been the case for a couple of weeks now. It is not causing problems as such, but it is not right either. If anybody can advise on how I can get our PA-500 to report correctly it would be appreciated! Please see below where the mismatch message and general window seem to contradict each other. It suggests 1637-2114 is installed here too... ...and the log seems to suggest that is was installed but then says it failed. If I change something in the policy and perform a commit then the mismatch will go away. Any help appreciated! Many thanks, Dave
... View more
08-12-2015
07:03 AM
Thank you both for your replies! Since writing the post I have managed to test with PPTP / GRE in the lab and it worked exactly as you have confirmed. I am hoping that ESP will work in the same way but I've not got an suitable L2TP server to test with. Thanks again, Dave
... View more
08-11-2015
03:07 AM
Hi all, I'm hoping somebody might be able to help with this unusual scenario please? I have been tasked with replacing an old linux based firewall with a PA-500 device. Initially the configuration of the PA-500 should just replicate what the current firewall is doing before we start phasing in the additional security capabilities of the Palo. The only thing I am concerned about is the way that ESP and GRE connections are NATed on the linux firewall. The protocols and ports associated with PPTP/L2TP will hit the Palo on its external interface and need to be destination NATed to a VPN server on an internal network. I cannot see any way to specifically NAT ESP or GRE on the Palo but I suspect leaving the service as "any" in my NAT rule might achieve this? An additional complication though is that other ports on the external interface of the Palo need to be destination NATed to other internal devices. If I put these port specific NAT rules above my "any" rule would the destination NAT of GRE/ESP still be performed please? Any help or guidance would be greatly appreciated! Many thanks, Dave
... View more
Labels:
- Labels:
-
Configuration
-
Networking
-
Set Up
02-12-2015
01:12 AM
You may have seen already, but PA are advising that we should roll back to 484. Regards, Dave
... View more
02-11-2015
04:02 AM
Additionally for those using PAN-DB, a list of categories and examples can be found here: Palo Alto Networks URL Filtering - Category List
... View more
02-11-2015
02:34 AM
Hi mrsold It will only relay for one subnet. The interface address used to relay the DHCP request (and therefore determine which DHCP scope will be used) is the IP address at the top of the list on your IPv4 tab. You can adjust the positioning of IP addresses on this tab using the move up/down options should you wish. Regards, Dave
... View more
02-11-2015
12:04 AM
If you are not seeing any logs prior to the restart on the failed device then this is strange. How do you connect to your PA device to check logs please? Via MGT interfaces or one of the firewall interface IPs? If your failed device had a power issue then there should be log entries reporting the loss of heartbeat connection to peer device.
... View more
02-09-2015
06:40 AM
Hi HDC, We have upgraded the memory in all of our PA-500 devices and this does make a noticeable difference to the management interface speed, commit times etc. We have also been trialling a VM-100. We've had a few reliability issues and I understand that the cause of these is being addressed in 6.1.3. Other than that though, we've been impressed by the general performance of the VM-100 and delighted by the boost in management interface speed / commit times. Regards, Dave
... View more
02-09-2015
03:02 AM
The reason why the fail-over occurred *should* be in the logs of the device that was active previously. Are you still able to connect to the out-of-band MGT network interface of the failed device? If so, hopefully you will be able to see the logs up until the time of failover. Logs are not synchronised between devices. Regards, Dave
... View more
02-09-2015
02:50 AM
Hi Predrag, Thanks for this. Hopefully I can use it to steer our support people in the right direction to try and get a bit more info. Best regards, Dave
... View more
02-09-2015
01:58 AM
Hi sib, Do you mean how do you do this without subscribing to Palo / Brightcloud for URL filtering? If so, I believe that you can still use custom URL categories. Regards, Dave
... View more
02-09-2015
01:45 AM
Many thanks Predrag, It is good to hear that support have now reproduced this! Did they give any indication of what was might be triggering the issue please? Chasing up my support people now as still waiting to hear back from them... Regards, Dave
... View more
02-09-2015
01:38 AM
Hi tan.in Much of the memory being used is being shown against "cached". The system will allocate unused memory to act as a disk cache. This is returned to the free memory pool if a new or running process needs it. This often gives the impression that there is not much memory free, but in reality the memory is just being put to good use until it is needed. Regards,
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-11-2019
09:55 AM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
