About Mystique

Mystique · ‎02-02-2015

If OS version 6.0 and above then, tail follow yes mp-log pan_dhcpd.log or tail follow yes mp-log dhcpd.log

Mystique · ‎01-21-2015

Please try the steps as described in below document to test the connectivity issues: CLI Commands for Troubleshooting BrightCloud URL Database Download I did a quick test in the lab firewall and I am seeing same issue admin> request url-filtering upgrade brightcloud BrightCloud URL filtering database update initiated admin> tail follow yes mp-log pan_bc_download.log Jan 21 09:46:43 Loading BrightCloud URL categories... Jan 21 09:47:54 ip 23.21.220.40 message RT time 59.825 Jan 21 09:48:54 ip 23.21.130.104 message RT time 60.044 Jan 21 09:49:55 ip 54.225.204.169 message RT time 60.663 Jan 21 09:50:55 ip 50.19.230.248 message RT time 59.964 Jan 21 09:51:00 Best IP for service.brightcloud.com is 23.21.220.40 Jan 21 09:51:00 Connected to Brightcloud update server service.brightcloud.com, initiated by 10.66.18.89 Jan 21 09:51:59 Cannot receive data from 'service.brightcloud.com:80' to download BrightCloud URL database Jan 21 09:52:02 Error downloading latest URL database

Mystique · ‎01-20-2015

please check authd logs for any issues related to authentication by using below cli command > tail follow yes mp-log authd.log If the end user is getting some sort of block page then check traffic and URL logs under Monitor --> Logs

Mystique · ‎01-16-2015

Same applies for modifying existing security policy. See below. For e.g. trust-to-untrust is existing security policy, then you can add application filter by navigating to Application tab under existing security policy

Mystique · ‎01-16-2015

Please refer to this document How to Create Application Filter to Block High Risk Applications Note: Please mark answers as "correct answer" or "helpful answer" if it helped in anyway.

Mystique · ‎01-14-2015

There is an existing feature request for this. FR ID 1370 - URL Column length limit in reports Please contact your SE to vote for it. Note: Please mark answers as "correct answer" or "helpful answer" if it helped in anyway. Thanks

Mystique · ‎01-14-2015

Please refer to this document to understand in detail how PAN will detect Bittorrent traffic How does detection of Bittorrent work on the PAN

Mystique · ‎01-14-2015

There is no settings available to truncate URLs for reports. The dataplane can handle hostnames up to 62 characters for BrightCloud and up to 255 characters for PAN-DB. If you are using PAN-DB, then you will see string upto 255 characters long. Helpful discussion and document Re: URL length limitation in PAN-DB Long URLs Categorized as Unknown

Mystique · ‎01-12-2015

Hello Lewis, Thanks for the update. Rebooting the device might not fix the issue. Temporary fix is to remove corrupted files from root and permanent fix is to upgrade to 6.0.2 or later version. Note: Please mark answers as "correct answer" or "helpful answer" if it helped in anyway. Thanks

Mystique · ‎01-09-2015

Hello, This is a known bug ID 62321 and fixed in 6.0.2 build. For workaround, TAC will need to delete some corrupted mongodb journal files manually from root. Please continue to work with support to purge few files from root to gain access. Hope this helps

Mystique · ‎01-08-2015

Hello, This is non-configurable option and it is an automated process. You can use run now to generate the report right away.

Mystique · ‎01-07-2015

You can just click on + (add filter) symbol under Monitor --> Traffic or Threat or URL etc. and then use Add log filter to get desired results. Helpful doc: How to Add, Save, Load, and Clear Log Filters

Mystique · ‎01-06-2015

This error - Error: Failed to parse security policy was clue for issue being with security policy. Glad to know upgrade was successful. Have a great day ahead!!

Mystique · ‎01-06-2015

I can see the whole group name as below from cli command output cn=all students,ou=groups,ou=students,dc=cadets,dc=cbchs,dc=org Can you please try to delete the security rule in which this group name is being used and then commit. If commit is successful, then reconfigure the security rule again. Hope this helps. If not then you might want to open a support case to further troubleshoot the issue live.

Mystique · ‎01-06-2015

can you send output of below command from PA FW CLI active or passive device: > show user group list

Member Since	‎05-03-2013 07:20 AM
Date Last Visited	‎03-25-2025 11:35 AM
Posts	64
Total Likes Received	23

Online Status	Offline
Date Last Visited	‎03-25-2025 11:35 AM

About Mystique

Re: tcpdump like packet capture on PA

Re: BrightCloud URL Database Not Reachable

Re: User Admin PA using ADprofile get blocked

Re: Adding application filter to existing security profile

Re: Adding application filter to existing security profile

Re: Truncate URLs for Reports

Re: Bit Torrent deny rule

Re: Truncate URLs for Reports

Re: Alert: high : mdb: Exited 4 times, waiting x seconds to retry

Re: Alert: high : mdb: Exited 4 times, waiting x seconds to retry

Re: How do I add additional log storage to VM Series?

Re: Implementing QoS

Re: Not Receiving Scheduled Reports

Re: Commit Error after upgrading to 6.1.1 from 6.0.1

Re: Globalprotect Mobile - no cert found

Re: tcpdump like packet capture on PA

Re: BrightCloud URL Database Not Reachable

Re: User Admin PA using ADprofile get blocked

Re: Adding application filter to existing security profile

Re: Adding application filter to existing security profile

Re: Truncate URLs for Reports

Re: Bit Torrent deny rule

Re: Truncate URLs for Reports

Re: Alert: high : mdb: Exited 4 times, waiting x seconds to retry

Re: Alert: high : mdb: Exited 4 times, waiting x seconds to retry

Re: Report Scheduling on PA

Re: Filter Query Lexicon

Re: Commit Error after upgrading to 6.1.1 from 6.0.1

Re: Commit Error after upgrading to 6.1.1 from 6.0.1

Re: Commit Error after upgrading to 6.1.1 from 6.0.1

Unlock your full community experience!

About Mystique