About Gururaj

Hi,   We have implemented the PaloAlto firewall through which traffic is passing without any issues. Now we want to enable DoS protection and we assume that the current traffic passing through firewall is legetimate.   I need your help to understand and obtain the below values. How to get packets per second value for the traffic entering the particular interface of the firewall ( To set aggregate DoS Profile). How to get packets per second value for the traffic passing through the firewall for particular destination ( To define classsified DoS profile).   Thank you, Guru     ... View more

Hi All,   We have the requirement where we have to setup dual authentication for some set (Group) of  user and single authentication for remaining global protect user. Is this duable? if yes, please provide info. Note : We have the single gateway.   Regards, Guru ... View more

HI All,   what is the difference between Botnet report and DNS Sinkholing? we can see the botnet reports to identify the infected machine by identifing the connection requests to the malicius URL repetedly, please help me to understand this.   Thank you, Guru ... View more

Hi All,   We have the setup as shown below, In this scenario,  Layer 2 switch (2960) showing the MAC address of the Exchange server learnt through the interface of the switch Gi 0/1 which connects to the PAN firewall in V-wire mode to an ASA . We connected PA direclty to Core switch and made a static entry in switch for MAC address entry the port where exchange server is connected. Now it is working.   But we need permanent fix and the reason why PaloAlto id doing this? 😞       we have more info after the below snap     troubleshoot an issue seen with connectivity to Exchange server cluster IP 172.16.12.190 from any of the remote locations and when the issue occurred, we could notice that the Layer 2 switch showing the MAC of the end host learnt through the interface of the switch Gi 0/1 which connects to the PAN firewall in V-wire mode to an ASA. Though the traffic path for reaching this server does not involve the PAN V-Wire, when the issue occurred, the flow shows at the receive stage in PAN packet capture and traffic logs. The issue is not seen when PAN V-wire is removed from the connectivity.    Thank you, Guru ... View more

Hi All,           After implementing SSH decryption, can  PA have the visibility to idenfity whether commands or any other data is being shared over ssh       with regards, Ram ... View more

Hi All,           I want to find maxmimum session count reached in the past month. Now the PA device is not live, so i cannot find the current/live session count from the dashboard.   Under monitor > App Scope > network monitor i can get the traffice detail for the session count but it is showing number session for the whole day. I have attached the screenshot of the same for your reference.     And also created a report for number of session in any any allow rule(in virutal wire deployment), but report is generated for the whole 15 minutes(not less time than 15min), wecant find the peak value.   Can someone help me to get Maximum session count reached for the past month or any specific time.     with regards, Ram. ... View more

Hi,      We couldn't activate brightcloud url filtering with our old database. I have attached the screenshot for you reference, kindly look into it and help.       with regards, Ram   ... View more

Hi Team,   Can we enable HIP check for LAN users? if yes, is it is limited to allowed Global protect client on each model?   Regards, Guru ... View more

Hi all,           I am using pan os 7.0.2, can we restore the current config saved file to 7.0.1 or 7.0         with regards, Ram Balaji. ... View more

Hi All,          I am using pan os 7.0.2, is there any option to generate compliance based reports from firewall itself.       with regards, Ram Balaji. ... View more