About dannon

Hi, we had this same situation.  Reseller didn't order the full IOT+CDL sub and just did IOT.  Pain in the rear to fix after the fact for us.  Answer is no, you have to have the CDL add-on to use IoT.  I was told someone forgot to use the correct SKU when it was renewed.  We ended up getting it fixed after 3 months, but ended up having to buy the CDL after the fact. Hope that helps dannon   ... View more

I had same issue and a commit force caused the device cert to redownload properly ... View more

Updating PanOS to 10.1.5 on our 5520 fixed the slowness on the monitor tab for us. We are currently on 10.1.5-h2 and the slowness has not come back. ... View more

Just a follow up that the upgrade to 10.1.5 has restored the normal GUI traffic logs to regular speed again. ... View more

We have a PA-410. Command not found:   admin@palo-fw> show log traffic   Invalid syntax. admin@palo-fw> show log > log                        Show logs related information > log-collector         Show log-collector information > logging-status      Show logging status and info > logrcvr                 Show information in log receiver daemon   admin@palo-fw> show log traffic   Invalid syntax. admin@palo-fw>   ... View more

I think there is an issue with 10.1.x and log slowness.  10.0.x was fine, all of the 10.1.x have been painfully slow.  We use a 5220.  It's upgrade weekend, so plan on going to 10.1.5, as I noticed a specific fix for log slowness in the release notes.  I am hoping it helps. ... View more

I've seen the same slowness on the monitor tab since updating to 10.1.x   I plan on installing 10.1.5 on our 5220 this weekend and will update the thread if I see an improvement after. dannon   ... View more

Dang! We are only on 8.13 because of bugs in 9.0 / 9.1 we experienced and had to roll back.   Glad it will be there when we finally move to the newer code.   ... View more

Joe, I'd like to request that this information also be viewable in the GUI as well, maybe under "monitor"? Always nice to be able to get the info in both places. Maybe add this as a feature-request?   ... View more

Hi @dannon    I have added your FR IDs to the list. And in addition I have some comments: @dannon wrote: 1.  run a "user activity report"  in the "Download URL logs" link which open up a CSV file, please in this file include either the original Username or IP address which was entered into the box on the original "User Activity Report" dialog. We are concerned that Lawyers might not hold the file up in court since it doesn't have a username / IP tied to it.  Only the "Download User Activity Report" has that. - FR11763 What abour simply downloading the logs directly from the URL logs? The boss specifically is concerned about detailed user report - he has a specific need to see all traffic for a particular user.  He says it allows the ability to see "intent".  It's because our HR dept is very wishy-washy and don't want to repremand someone unless there is bullet-proof evidence.  I guess the boss is extending this rationale to a legal scenario.  I don't always agree with the logic, but it's what he wants to see.   @dannon wrote: 3.  Show current interface bandwidth in a dashboard widget. Be able to log over time. - FR4507 Since PAN-OS 8.1 there is a device health monitoring in panorama which includes bandwidth We only have 1 firewall, so aren't going to get buy Panorama.  Would be nice to add a widget to the existing dashboard natively.  I would think it wouldn't be that hard.   @dannon wrote: 5.  Allow the GUI to change colors - themes.  Maybe a dark theme?- FR11765 This is already possible with browser extensions (maybe even directly in the browser) by enabling high contrast modes or by changing the css. I've had other vendors (Fortinet) that allow this natively.  It's not a high priority, but since others can do it, why not Palo?  I just thought I'd add it to the list for the future in case someone else wants the feature too.   @dannon wrote: 6.  In "Response Pages", have a "Preview" link, so that we can see the page quickly without having to download and open in another browser.  Useful when making changes.- FR913 Because of the low number of this feature request this one is already pretty old so I think the chances that this (checkpoint) feature will be implemented are not that high... Understandable, but again, included just to have a request out there.     Tags (0) Add tags   ... View more

Reached out to my SE with these:   1.  run a "user activity report"  in the "Download URL logs" link which open up a CSV file, please in this file include either the original Username or IP address which was entered into the box on the original "User Activity Report" dialog. We are concerned that Lawyers might not hold the file up in court since it doesn't have a username / IP tied to it.  Only the "Download User Activity Report" has that. - FR11763 2.  Log and report search keywords - user typed in suicide into Google - FR6186 3.  Show current interface bandwidth in a dashboard widget. Be able to log over time. - FR4507 4.  Log /report / make a column header the TLS/SSL version detected on HTTPS sites. - FR5678 5.  Allow the GUI to change colors - themes.  Maybe a dark theme?- FR11765 6.  In "Response Pages", have a "Preview" link, so that we can see the page quickly without having to download and open in another browser.  Useful when making changes.- FR913 7.  Allow for more "User Activity Report" customization - pie charts, different bar charts, color, tables, etc. - FR11764   ... View more

I'd like to add a feature request: run a "user activity report"   in the "Download URL logs" link which open up a CSV file, please in this file include either the original Username or IP address whihch was entered into the box on the original "User Activity Report" diaglog.   We are concerened that Lawyers might not hold the file up in court since it doesn't have a username / IP tied to it.  Only the "Download User Activity Report" has that.   Thanks, dannon   ... View more

Here is what I have setup right now.  I've see that article before.  What I am wondering is what to set things now in order to get things normalized like they were before.   ... View more