This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About KarimSN
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About KarimSN
09-27-2023
5Posts
0Likes
0Solutions
Sep 27, 2023Last Visited
User
Activity
User
Profile
Latest posts by KarimSN
| Subject | Views | Posted |
|---|---|---|
| 1716 | 08-05-2020 03:13 PM | |
| 3035 | 08-23-2018 07:21 AM | |
| 3008 | 08-06-2018 06:50 AM | |
| 3013 | 08-06-2018 05:08 AM | |
| 3026 | 08-01-2018 06:43 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 06-28-2018 07:54 AM |
| Date Last Visited | 09-27-2023 05:16 PM |
| Posts | 5 |
08-05-2020
03:13 PM
Hello We are currently investigating if we can have any benefit deploying Palo Alto VM series firewall in our Azure Paas environment. We are looking to increase visibility mainly for traffic towards some of our public facing applications through the AG as well as traffic towards our on-prem environment. I understand there a hub and spoke design where all in/outbound traffic will go through the hub hosting the VM series. Has anyone here has any recommendation when it comes to Paas environment? Will VM series be of any help in Paas or it is only used in Iaas environment? thanks
... View more
08-23-2018
07:21 AM
Hello, I am getting an error pushing a template from panorama to a device as below Details: . High-availability ha1 interface needs a prefix length(Module: ha_agent) . Commit failed Warnings: This is related to a HA settings. However i have manually set HA setting on each of the A/P PA pair so i have not configure any HA settings into the panorama template for the device. I am quite puzzled why i am getting such that error. Any suggestion? Cheers /Karim
... View more
08-06-2018
06:50 AM
Yes indeed you assumption is right. It looks like we have to go for cost manipulation or at best using ECMP ( which needs restarting virtual router!!!) The only reason we opted initially not to use the cost was to avoid bottleneck in one hub location. Our Hub here is actually a few DC locations ( in backbone area) but we wished we could load balance traffic...so maybe only ecmp is a solution for us. Cheers
... View more
08-06-2018
05:08 AM
Hi Otakar thanks for the feedback. " traffic will be forwarded out the first interface that learns about the route " that seems to be in line with the "oldest known" route being chosen as a tie breaker. Regarding the setup i would say that we have multiple area as the location where the output were taken from are spoke sites talking to our hub(s) were we have the backbone area. So basically the setup looks like this; Spoke 1 ----(multiple tunnels) -----BACkBONE (hubs) -----(multiple tunnels)--- Spoke2 With tunnel failing from time to time causing asymetric traffic, that is why i am trying to figure out what actually is the tie breaker in case of same cost link to have a better prediction of chosen path. cheers
... View more
08-01-2018
06:43 AM
Hi all, I am trying to make sense of tie breaker in case of equal cost ospf routes on palo alto ( all the route below have the same metric and all of the same type). Note ECMP is not use so only one route is choosen for routing. Couldn't find on the rfc what would be the tie breaker on such case and on some forum some people refer to the lowest router-ID, some other refer to the oldest installed route. Any idea on how PA implements it? side 1: VR Area ID Orig RTR ID LS ID LSA Type Seq Number CheckSum Age Size 0.0.0.2 1.1.1.1 10.25.2.0/23 type-3 (Summary) 0x80000667 0x000081AD 715 28 0.0.0.2 2.2.2.2 10.25.2.0/23 type-3 (Summary) 0x80000667 0x00005055 711 28 ( prefered route on fib) 0.0.0.2 3.3.3.3 10.25.2.0/23 type-3 (Summary) 0x80000667 0x0000D4AA 832 28 Side 2: VR Area ID Orig RTR ID LS ID LSA Type Seq Number CheckSum Age Size 0.0.0.3 1.1.1.1 10.27.0.0/23 type-3 (Summary) 0x800018EC 0x00003E59 1673 28 ( prefered route fib) 0.0.0.3 2.2.2.2 10.27.0.0/23 type-3 (Summary) 0x80000B5E 0x00005158 1472 28 0.0.0.3 3.3.3.3 10.27.0.0/23 type-3 (Summary) 0x80002ADE 0x0000776C 666 28
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks