This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew

About Register_Security

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Register_Security
‎05-29-2024
since ‎07-10-2013
L3 Networker
User Activity
User Profile
Latest posts by Register_Security
View All
My Liked Posts
View All
User Badges
Community Statistics
Member Since ‎07-10-2013 11:34 PM
Date Last Visited ‎05-29-2024 07:03 AM
Posts 48
Total Likes Received 1

Re: Can not access to Web Admin GUI on Active Device Paloalto, can access to Standby device in HA Sy

by in General Topics
‎03-21-2017 08:20 PM
‎03-21-2017 08:20 PM
Hi BPry, Thanks a lot your reponse. "It looks like your account has been locked out for some reason." -> Yes, it's exprired by password profile (account not use in amount time). But with the backup admin account (never exprired), I also not access to Web GUI with this account (only access to CLI). Result of "tail follow yes mp-log authd.log" command, plz reivew it: 2017-03-22 10:04:20.832 +0700 Error: pan_auth_user_is_in_locklist(pan_authd_localdb_utils.c:177): failed to prepare sql statement: select * from locklist where vsysname=? and profilename=? and lower(username)=lower(?) and flags<>? 2017-03-22 10:04:20.833 +0700 Error: pan_auth_lock_user(pan_authd_localdb_utils.c:853): failed to lock user <shared,__dummy_%_admin_%_profile__,apiconfig> 2017-03-22 10:04:20.833 +0700 Error: pan_authd_user_auth_failure_alarm_gen(pan_authd_localdb_utils.c:695): failed to prepare sql statement: select * from locklist where vsysname=? and profilename=? and lower(username)=lower(?) and flags<>? 2017-03-22 10:04:20.833 +0700 debug: pan_authd_process_authresult(pan_authd.c:1399): Alarm generation set to: False. 2017-03-22 10:04:20.833 +0700 User 'abc' failed authentication. Reason: Invalid username/password From: 192.168.x.x. 2017-03-22 10:04:20.833 +0700 debug: pan_authd_generate_system_log(pan_authd.c:866): CC Enabled=False 2017-03-22 10:06:20.966 +0700 debug: pan_authd_service_req(pan_authd.c:3324): Authd:get group request 2017-03-22 10:06:20.966 +0700 debug: pan_authd_handle_group_req(pan_authd.c:3211): Got user role/adomain / for user xxx 2017-03-22 10:06:20.968 +0700 Error: pan_authd_inc_expired_login_count(pan_authd_ludb.c:3986): Error in binding username to sql statement.Could not access login history. 2017-03-22 10:06:20.968 +0700 Error: pan_authd_handle_group_req(pan_authd.c:3259): Failed to increment login count for xxx Ps: Update your dang systems man! 6.1.4 is out of date even in the 6.1.* line! -> Thanks a lot for your remind, I will update asap ^_^ ... View more

Can not access to Web Admin GUI on Active Device Paloalto, can access to Standby device in HA System

by in General Topics
‎03-21-2017 12:42 AM
‎03-21-2017 12:42 AM
Hi All,   I have met a problem with access to my Active Pan Device by Web Admin GUI. I can access by SSH Console and I can access to Standby Device in HA System. My device: PAN 3020, OS Version 6.1.4.   Have anyone meet the same problem, please share the solutions.   Error logs --------------------- 2017-03-21 11:04:21.009 +0700 Error: pan_authd_user_is_lockedout(pan_authd_localdb_utils.c:389): failed to prepare sql statement: select * from profiledb where vsysname=? and profilename=? 2017-03-21 11:04:21.012 +0700 Error: pan_auth_user_is_in_locklist(pan_authd_localdb_utils.c:177): failed to prepare sql statement: select * from locklist where vsysname=? and profilename=? and lower(username)=lower(?) and flags<>? 2017-03-21 11:04:21.013 +0700 Error: pan_auth_lock_user(pan_authd_localdb_utils.c:853): failed to lock user <shared,__dummy_%_admin_%_profile__,apiconfig> 2017-03-21 11:04:21.014 +0700 Error: pan_authd_user_auth_failure_alarm_gen(pan_authd_localdb_utils.c:663): failed to prepare sql statement: select * from profiledb where vsysname=? and profilename=? 2017-03-21 11:06:25.975 +0700 Error: pan_authd_handle_get_pwchange_required(pan_authd.c:3041): Failed in get_pwchange_required. 2017-03-21 11:06:26.082 +0700 Error: pan_auth_get_lastpwchange(pan_authd_localdb_utils.c:2943): Error in preparing sql statement.Could not access password history. 2017-03-21 11:06:26.082 +0700 Error: pan_auth_set_lastpwchange(pan_authd_localdb_utils.c:2994): Error getting lastpwchange for user:user1 2017-03-21 11:06:26.082 +0700 Error: pan_authd_handle_set_lastpwchange(pan_authd.c:2971): Failed to set lastpwchange. 2017-03-21 11:06:26.604 +0700 Error: pan_authd_admin_unlock_complete_handler(pan_authd_ops.c:482): failed to prepare sql statement: select * from authseqdb 2017-03-21 11:06:26.605 +0700 Error: cfgagent_doop_callback(pan_cfgagent.c:512): Failed to handle op command for agent: 2017-03-21 11:06:43.304 +0700 Error: pan_authd_admin_unlock_complete_handler(pan_authd_ops.c:482): failed to prepare sql statement: select * from authseqdb 2017-03-21 11:06:43.304 +0700 Error: cfgagent_doop_callback(pan_cfgagent.c:512): Failed to handle op command for agent: 2017-03-21 11:07:19.557 +0700 Error: pan_cfg_parse_authprofiles(pan_authd_ludb.c:1005): lockout time value missing 2017-03-21 11:07:19.558 +0700 Error: pan_cfg_parse_authprofiles(pan_authd_ludb.c:1005): lockout time value missing 2017-03-21 11:07:19.746 +0700 Error: pan_ludb_unmark_all(pan_authd_ludb.c:1640): failed to unmark rows in db: unable to open database file 2017-03-21 11:07:19.746 +0700 Error: pan_ludb_update_user_db(pan_authd_ludb.c:1764): failed to unmark rows in db 2017-03-21 11:07:19.747 +0700 Error: pan_ludb_update_profiledb(pan_authd_ludb.c:2189): failed to drop table in db: unable to open database file 2017-03-21 11:07:19.747 +0700 Error: pan_ludb_update_auth_db(pan_authd_ludb.c:3141): failed to update profile db 2017-03-21 11:07:19.747 +0700 Error: pan_ludb_update_adminuser_db(pan_authd_ludb.c:3075): failed to drop adminusers table in db: unable to open database file 2017-03-21 11:07:19.748 +0700 Error: pan_ludb_update_ssh_authkey(pan_authd_ludb.c:3048): Could not set ssh-authentication public key for admin2017-03-21 11:07:19.748 +0700 debug: pan_cfg_set_ssh_auth_public_key(pan_cfg_utils.c:7497): Public key format = OpenSSH, type = RSA 2017-03-21 11:07:19.815 +0700 Error: pan_ludb_update_ssh_authkey(pan_authd_ludb.c:3048): Could not set ssh-authentication public key for giangpd2017-03-21 11:07:19.816 +0700 Error: pan_ludb_update_ssh_authkey(pan_authd_ludb.c:3048): Could not set ssh-authentication public key for apiconfig2017-03-21 11:07:19.816 +0700 Error: pan_ludb_update_ssh_authkey(pan_authd_ludb.c:3048): Could not set ssh-authentication public key for xemconfig2017-03-21 11:07:19.816 +0700 Error: pan_ludb_update_ssh_authkey(pan_authd_ludb.c:3048): Could not set ssh-authentication public key for xemreport2017-03-21 11:07:19.816 +0700 Error: pan_ludb_update_ssh_authkey(pan_authd_ludb.c:3048): Could not set ssh-authentication public key for user12017-03-21 11:07:19.816 +0700 Error: pan_ludb_update_ssh_authkey(pan_authd_ludb.c:3048): Could not set ssh-authentication public key for checkarp2017-03-21 11:07:19.816 +0700 Error: pan_ludb_update_ssh_authkey(pan_authd_ludb.c:3048): Could not set ssh-authentication public key for user12017-03-21 11:07:19.816 +0700 Error: pan_authd_remove_pwhistory(pan_authd_localdb_utils.c:3100): failed to remove all users from pwhistory 2017-03-21 11:07:19.816 +0700 Error: pan_authd_delete_expired_login_count(pan_authd_ludb.c:4092): Error delete login count from login history.Could not access login history. --------------------- Thanks in advances. ... View more

Re: Can not check Forward Trust Certificate

by in General Topics
‎10-15-2014 01:02 AM
‎10-15-2014 01:02 AM
Hi Jahnavi, On my device, I generate my certificate with Extenal Authority CSR, after 3 parthy issue the certificate. I edit an CRT file: -----BEGIN CERTIFICATE----- Root CA -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- Intermediate -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- issued certificate -----END CERTIFICATE----- I import in to PAN successfully, I can check "Forward Trust Certificate", when I run "commit", the PAN inform "Unmatch certificate and key". Have you experience for this problem, please share for me. Thanks in advance, ... View more

Re: Can not check Forward Trust Certificate

by in General Topics
‎10-14-2014 04:47 AM
‎10-14-2014 04:47 AM
Yeah, I want to use SSL decryption, how can I get subordinate CA ? ... View more

Can not check Forward Trust Certificate

by in General Topics
‎10-14-2014 02:53 AM
‎10-14-2014 02:53 AM
Hi All, My device is PANOS 6.0.5; I have a problem with Certificate configuration. On my device, I generate a Certificate follow How to Generate a CSR(Certificate Signing Request) and Import the Signed Certificate; After, my 3rd party CA issue complete, I import the issued certificate (crt file) successfully and status is "valid" I can check "Certificate for Secure Web GUI" but I can not check "Forward Trust Certificate" option. I really don't know where is my problem, please help Thanks, ... View more

Re: Do not display Threat log with descent sort on palo alto device 3020

by in General Topics
‎09-09-2014 07:38 PM
‎09-09-2014 07:38 PM
Hi Hulk, After the "debug software restart web-server", the threat log was displayed again, but when I use custom report, it do not have any record in some days. Have you ever seen the same problem ? share experience Thanks, ... View more

Re: Do not display Threat log with descent sort on palo alto device 3020

by in General Topics
‎09-09-2014 02:38 AM
‎09-09-2014 02:38 AM
Hi Hulk, I really confuse with my device, I run debug software restart web-server , but it does not display any threat log Thanks ... View more

Re: Do not display Threat log with descent sort on palo alto device 3020

by in General Topics
‎09-08-2014 11:51 PM
‎09-08-2014 11:51 PM
Hi Hulk, Result of show system resources follow top - 13:49:05 up 37 days, 11:29,  1 user,  load average: 0.00, 0.00, 0.00 Mem:   3852228k total,  3719088k used,   133140k free,   129616k buffers Swap:  2008084k total,     1576k used,  2006508k free,  2391864k cached   PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND                                                                                                    1975 root      20   0  501m 350m 6960 S    2  9.3 932:08.74 mgmtsrvr                                                                                                   2000 root      20   0  273m 147m  10m S    1  3.9 175:40.64 devsrvr                                                                                                    2011 root      20   0  325m 129m 7312 S    3  3.4 327:53.55 logrcvr                                                                                                    1978 root      20   0  156m  73m  64m S    0  2.0   3:03.56 useridd                                                                                                    26616 nobody    20   0  119m  56m 4272 S    0  1.5   1046:00 appweb3                                                                                                    2034 root      20   0 47864  37m 1868 S    1  1.0 226:18.66 snmpd                                                                                                      16063 quoclc    20   0 43412  17m 9196 S    0  0.5   0:00.38 cli                                                                                                        1824 root      20   0 53064  12m 2680 S    0  0.3   7:38.81 dagger                                                                                                     26614 nobody    20   0 76120  12m 3040 S    0  0.3   0:14.39 appweb3                                                                                                    2019 root      20   0 93448  11m 2636 S    0  0.3   2:51.68 satd                                                                                                       2025 root      20   0  135m  11m 2488 S    0  0.3   9:16.03 routed                                                                                                     26625 nobody    20   0 81624  10m 3284 S    0  0.3   0:11.02 appweb3                                                                                                    2016 root      20   0  250m 7628 2324 S    0  0.2  13:04.66 varrcvr                                                                                                    1799 root       0 -20 31736 6852 2392 S    0  0.2  18:36.90 masterd_core                                                                                               1818 root       0 -20 14032 6696 1332 S    0  0.2  32:32.04 masterd_manager                                                                                            1826 root      20   0 56020 6384 2396 S    0  0.2   4:19.47 cryptod                                                                                                    1825 root      30  10 13656 6376 2224 S    0  0.2  15:31.45 python                                                                                                     2026 root      20   0  108m 5608 3220 S    0  0.1   0:24.85 authd                                                                                                      1816 root      15  -5 20724 4912 1536 S    1  0.1 231:50.67 sysd                                                                                                       2024 root      20   0 53688 4424 2052 S    0  0.1   0:01.58 pppoed                                                                                                     2023 root      20   0 52664 4408 2068 S    0  0.1   0:01.32 dnsproxyd                                                                                                  2021 root      20   0 82560 4296 2308 S    0  0.1   0:37.78 sslmgr                                                                                                     32688 root      20   0  4268 4264 3280 S    0  0.1   0:00.02 ntpd                                                                                                       2010 root      20   0 69616 4200 2640 S    0  0.1   0:56.94 ikemgr                                                                                                     2014 root      20   0 78600 3716 2336 S    0  0.1   2:06.81 rasmgr                                                                                                     2018 root      17  -3 35920 3648 2236 S    0  0.1   6:13.69 ha_agent                                                                                                   3884 root      20   0 10648 3636 1944 S    0  0.1  28:05.31 packet_path_pin                                                                                            1831 root      20   0  133m 3576 1844 S    0  0.1  14:05.07 sysdagent                                                                                                  2022 root      20   0 35312 3472 2080 S    0  0.1   0:02.05 dhcpd                                                                                                      2015 root      20   0 76808 2600 1580 S    0  0.1   2:02.81 keymgr                                                                                                     1843 root      20   0 26492 2256 1444 S    0  0.1   0:34.19 chasd                                                                                                      16038 root      20   0  6876 2236 1796 S    0  0.1   0:00.06 sshd                                                                                                       1844 root      20   0  3988 2216 1224 S    0  0.1   0:00.01 tscat             What is problem on my device ? ... View more

Re: Do not display Threat log with descent sort on palo alto device 3020

by in General Topics
‎09-08-2014 11:35 PM
‎09-08-2014 11:35 PM
Hi Hulk, I can see all of threat log on console, the problem can not see threat log on GUI (Monitor --> Logs --> Threar) Please help. ... View more

Do not display Threat log with descent sort on palo alto device 3020

by in General Topics
‎09-08-2014 08:17 PM
‎09-08-2014 08:17 PM
Hi All, I have a problem to view threat log on device. My device is 3020 model, with 5.0.9 version, threat verion: 445-2292. I do not see any threat log record when I select DESC sort, but I can see threat log with ASC sort. Please help me why ? thanks ... View more

Re: PAN-OS 5.0.6 SNMP

by in General Topics
‎08-11-2014 02:20 AM
‎08-11-2014 02:20 AM
Hi Leo I have a problem with command All of mibs file (PAN-MIB-MODULES-5.0-RevD) in /usr/share/snmp/mibs my pan is 5.0.9 snmpget -M /usr/share/snmp/mibs -m ALL -Pu -v 2c -c public 192.168.x.y 1.3.6.1.4.1.25461.2.1.2.3.2.1 all of message is "Cannot adopt OID in"; Please help me where I miss .... Thanks ... View more

Re: panorama: Do not see data report from scheduler.

by in General Topics
‎07-20-2014 06:59 PM
‎07-20-2014 06:59 PM
Panorama: 5.1.0 ... View more

panorama: Do not see data report from scheduler.

by in General Topics
‎07-18-2014 09:53 PM
‎07-18-2014 09:53 PM
Hi All, I configure a report from panorama and set schedule for sending result to my email. I have receive email from panorama via two file : a .dat file with key code inside, and a .pdf file with no data. I do not know why Please help me ... View more
Labels:

Re: Don't see Threat and URL log in panorama

by in General Topics
‎07-13-2014 08:41 PM
‎07-13-2014 08:41 PM
Hi Steven, Please see my debug information below. admin@Panorama> show logging-status device 001XXXXXXXXX       Type            Last Log Rcvd        Last Seq Num Rcvd       Last Log Generated     config      2014/07/14 10:19:10                     4918      2014/07/11 11:39:48     system      2014/07/14 04:02:32                    49500      2014/07/14 04:02:05     threat    traffic      2014/07/14 10:19:10               2225666165      2014/07/14 10:19:10   hipmatch admin@Panorama> request log-fwd-ctrl device 001XXXXXXXXX action stop scheduled a job with jobid 27. 27 admin@Panorama> show logging-status device 001XXXXXXXXX       Type            Last Log Rcvd        Last Seq Num Rcvd       Last Log Generated     config      2014/07/14 10:19:10                     4918      2014/07/11 11:39:48     system      2014/07/14 04:02:32                    49500      2014/07/14 04:02:05     threat    traffic      2014/07/14 10:20:11               2225687615      2014/07/14 10:20:10   hipmatch admin@Panorama> request log-fwd-ctrl device 001XXXXXXXXX action start scheduled a job with jobid 28. Converted log-fwd-ctrl action to 'start-from-lastack' 28 admin@Panorama> show logging-status device 001XXXXXXXXX       Type            Last Log Rcvd        Last Seq Num Rcvd       Last Log Generated     config      2014/07/14 10:20:46                     4918      2014/07/11 11:39:48     system      2014/07/14 04:02:32                    49500      2014/07/14 04:02:05     threat    traffic      2014/07/14 10:20:46               2225699275      2014/07/14 10:20:46   hipmatch admin@Panorama> debug software restart management-server Process 'mgmtsrvr' executing RESTART admin@Panorama> show logging-status device 001XXXXXXXXX       Type            Last Log Rcvd        Last Seq Num Rcvd       Last Log Generated     config      2014/07/14 10:24:06                     4918      2014/07/11 11:39:48     system      2014/07/14 10:24:06                    49530      2014/07/14 10:22:23     threat    traffic      2014/07/14 10:27:08               2225833365      2014/07/14 10:27:08   hipmatch On device I run debug admin@PA-Internet-3020-HO(active)> debug software restart log-receiver Process 'logrcvr' executing RESTART and show logging status again, but I still see, and I think it does not work correctly admin@Panorama> show logging-status device 001XXXXXXXXX       Type            Last Log Rcvd        Last Seq Num Rcvd       Last Log Generated     config      2014/07/14 10:24:06                     4918      2014/07/11 11:39:48     system      2014/07/14 10:24:06                    49530      2014/07/14 10:22:23     threat    traffic      2014/07/14 10:29:10               2225877874      2014/07/14 10:29:05   hipmatch ... View more

Re: Don't see Threat and URL log in panorama

by in General Topics
‎07-13-2014 08:38 PM
‎07-13-2014 08:38 PM
Hi Hshah, I see all of log locally device. ... View more
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎05-29-2024 07:03 AM
Latest Tags
No tags yet
Likes Given To
Likes From
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks