This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About jslabaugh1
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About jslabaugh1
10-19-2017
6Posts
0Likes
1Solution
Oct 19, 2017Last Visited
User
Activity
User
Profile
Latest posts by jslabaugh1
| Subject | Views | Posted |
|---|---|---|
| 1936 | 09-29-2017 07:09 AM | |
| 1937 | 09-29-2017 07:01 AM | |
| 1943 | 09-29-2017 06:46 AM | |
| 3050 | 05-01-2017 07:19 AM | |
| 3161 | 05-01-2017 06:34 AM | |
| 4583 | 10-22-2014 08:36 AM |
User Badges
Community Statistics
| Member Since | 10-16-2014 03:27 PM |
| Date Last Visited | 10-19-2017 09:38 AM |
| Posts | 6 |
09-29-2017
07:09 AM
I figured it out. I had a / after units. After removing that the set action worked. Before: https://firewall/api/?type=config&key=KEY&action=set&xpath=/config/devices/entry [@name='localhost.localdomain']/network/interface/ethernet/entry[@name='ethernet1/14']/virtual-wire/units/&element=<entry name='ethernet1/14.5501'/> Working: https://firewall/api/?type=config&key=KEY&action=set&xpath=/config/devices/entry[@name='localhost.localdomain']/network/interface/ethernet/entry[@name='ethernet1/14']/virtual-wire/units&element=<entry name='ethernet1/14.5501'/>
... View more
09-29-2017
07:01 AM
That's weird, because I don't have Panorama. When I try action=override I get this: <response status="error" code="12"> <msg> <line>Object cannot be overridden</line> </msg> </response>
... View more
09-29-2017
06:46 AM
I've tried several different variations and I can't seem to figure out the API call to add a v-wire subinterface. What would the correct syntax be? Here's one example that I have tried: https://firewall/api/?type=config&key=KEY&action=set&xpath=/config/devices/entry [@name='localhost.localdomain']/network/interface/ethernet/entry[@name='ethernet1/14']/virtual-wire/units/&element=<entry name='ethernet1/14.5501'/> It gives me this: response status="error" code="13"> <msg> <line> set failed, may need to override template object first </line> </msg> </response>
... View more
05-01-2017
07:19 AM
Yeah, I opened a TAC case and it went nowhere. Are you doing SSL decryption? I've been on several different 7.1.x releases but we're currently on 7.1.8. I've noticed that there is almost always a session showing bad key when running the 'show running resource-monitor ingress-backlogs' command which makes me think that my dataplane CPU issues are due to decryption. > show running resource-monitor ingress-backlogs -- SLOT: s1, DP: dp0 -- USAGE - ATOMIC: 1% TOTAL: 3% -- SLOT: s1, DP: dp1 -- USAGE - ATOMIC: 33% TOTAL: 34% TOP SESSIONS: SESS-ID PCT GRP-ID COUNT 34018913 3% 7 73 34359173 3% 1 2 3 57 7 3 37554439 3% 12 72 SESSION DETAILS SESS-ID PROTO SZONE SRC SPORT DST DPORT IGR-IF EGR-IF TYPE APP 34018913 6 INET_Inside x.x.x.52 26774 65.158.47.64 80 ethernet1/14 ethernet1/13 FLOW ms-update 34359173 6 WF_Inside x.x.x.61 58354 134.119.52.47 443 ae2 ae3 FLOW web-browsing > show session id 37554439 Session 37554439 Bad Key: c2s: 'c2s' Bad Key: s2c: 's2c' index(local): : 4000007
... View more
05-01-2017
06:34 AM
I'm curious how many people out there have had high dataplane CPU utilization ever since updating to 7.1? We updated to 7.1 so that we could decrypt additional ciphers and ever since updating we've had abnormally high dataplane CPU utilization which does not make any sense to me as we are nowhere near the stated maximum specifications on our 5050s. Our dataplane CPU is consistently between 70 and 100 percent. Right this second we're at 61,998 sessions and 83% dataplane CPU utilization.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-19-2017
09:38 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks