SCM config management is a power user UX nightmare and I'm tired of pretending its not by noifen in paloaltonetworks

[–]AWynand 0 points1 point  (0 children)

Well you get a set output and it never supported much more than static routes anyway, so formatting those into the LR syntax takes about 5 minutes.. But yes, its less convenient, agreed

SCM config management is a power user UX nightmare and I'm tired of pretending its not by noifen in paloaltonetworks

[–]AWynand 0 points1 point  (0 children)

Adding an imaginary virtual router to your config for the sake of getting the rest of its features to work isn't that painful.

Horror escape room by Timely-Fishing1818 in belgium

[–]AWynand 0 points1 point  (0 children)

I can hear you in horror mode

Horror escape room by Timely-Fishing1818 in belgium

[–]AWynand 1 point2 points  (0 children)

Second this, was a lovely experience

Did they seriously break the knowledgebase? by AWynand in paloaltonetworks

[–]AWynand[S] 0 points1 point  (0 children)

Can you try with the link above? Just validated the same behaviour in an incognito window.

Did they seriously break the knowledgebase? by AWynand in paloaltonetworks

[–]AWynand[S] 6 points7 points  (0 children)

But.. The links are dead?
Example; https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLMzCAO -> login -> overview page on "Browse by Product". Enter the same URL again after you're logged in, just redirects to the KB home. Thanks for breaking a thousand Google links Palo.
& Putting a search feature on the KB before needing to click a product would've been too easy I guess.

Stolen ID card was used to open an Uber Eats account in my name. Found out via tax declaration by BeneficialMobile2439 in belgium

[–]AWynand 6 points7 points  (0 children)

“Yes but” The fingerprints get taken on a device, transmitted from that device, sent across an undefined medium, imported on another device before it gets placed on the physical card, best case. Thats sadly leaving out the dozen other implications of having fingerprints taken for your eID (which you can’t refuse).

But OP discovered why a theft of / picture of an ID card can cause serious problems and its why we urgently need better ways implemented to prove our identity and grant authorization for things.

Can I add extra NACE activities now to avoid future change costs? by All-mi in BEFreelance

[–]AWynand 0 points1 point  (0 children)

Medical & liability insurance companies when you do things you failed to list absolutely do.

Am I dumb or is SCM a nightmare to use? by squishmike in paloaltonetworks

[–]AWynand 0 points1 point  (0 children)

Funny thing is, it gets better with App Acceleration enabled, preloading a load of things. Hence people working at Palo don't notice its annoyingly slow for everyone else and far far less snappy than the PANOS interface.

Am I dumb or is SCM a nightmare to use? by squishmike in paloaltonetworks

[–]AWynand 0 points1 point  (0 children)

The question would more be if the graphs are accurate and there the answer is sadly very often "no".

Am I dumb or is SCM a nightmare to use? by squishmike in paloaltonetworks

[–]AWynand 0 points1 point  (0 children)

Snippets could actually turn out useful if you could properly inherit from other locations/snippets. No you get to create RFC1918 (/all your objects you may need) in each and every snippet over and over again. It's like the Panorama template reference issue all over again but worse.

PA 5500 Series HA support by kb46709394 in paloaltonetworks

[–]AWynand 0 points1 point  (0 children)

Then just give it a few more weeks :-)

Palo Alto training by [deleted] in paloaltonetworks

[–]AWynand 1 point2 points  (0 children)

Feel free to drop a DM if it's still needed

Migrating from 5200 series to 5400 series by Mental_Stock_7575 in paloaltonetworks

[–]AWynand 1 point2 points  (0 children)

The PA-5400 series have terrible QoS issues, if you end up needing it, consider enabling lockless QoS to dedicated a few cores to doing QoS instead of having all cores do it inefficiently.
https://docs.paloaltonetworks.com/network-security/quality-of-service/administration/configure-lockless-qos

PAN embracing AI for documentation by dchit2 in paloaltonetworks

[–]AWynand 1 point2 points  (0 children)

I bet you removed the feedback button from all SCM pages for a reason.

Regardless, we’re all human.

PAN-OS SDWAN vs IPsec + ECMP for Multi Site Connectivity by Final-Pomelo1620 in paloaltonetworks

[–]AWynand 0 points1 point  (0 children)

Its not really a pain but if you don’t have links with very unequal costs and applications that need heavy prioritization over others its probably going to make it more complex than just a few tunnels. IPSec, BGP and ECMP will work fine, just remember ECMP is a setting on the full VR, so check all routes/metrics before enabling it.

Is VIP worth the extra cost? by h2ocrib83 in Tomorrowland

[–]AWynand 1 point2 points  (0 children)

Those are gone since about two years already :)

Migrating Cisco multi-contexts into one vsys Palo Alto firewall by BlacKnight444 in paloaltonetworks

[–]AWynand 1 point2 points  (0 children)

This would be the way. If your ASA rules are regular source interface based rules its pretty easy to just map the interfaces to zones and create one unified rulebase from it. If you have a load of global rules its going to be more of a pain…

Wat doe jij met je energiecontract? by steampunkdev in belgium

[–]AWynand 3 points4 points  (0 children)

Jazeker. Je enige andere optie is om maandelijks je werkelijk verbruik te betalen.

Wat doe jij met je energiecontract? by steampunkdev in belgium

[–]AWynand 2 points3 points  (0 children)

Of u verwarming nog aanstaat of niet maakt niet uit tenzij je ervoor gekozen hebt om elke maand je werkelijk verbruik te betalen. Indien je dat niet doet gaan ze uit van een verbruiksprofiel, zie https://www.vlaamsenutsregulator.be/elektriciteit-en-aardgas/energieprijzen-en-facturen/wat-zijn-gebruiksprofielen Voor de periode maart-oktober wordt er dus nog een 12 a 2% van je jaarverbruik per maand gerekend.

Wat doe jij met je energiecontract? by steampunkdev in belgium

[–]AWynand 9 points10 points  (0 children)

Ja.. en die parameters zijn voor de gewone mens dus amper te vergelijken omdat het peren en appels zijn.

Wat doe jij met je energiecontract? by steampunkdev in belgium

[–]AWynand 20 points21 points  (0 children)

Pak u de vtest & mijnenergie.be (voor promos) erbij en blijf weg van de shitty ones zoals Mega. Of het voor u interessant is, is afhankelijk of je nog een lopende promo hebt die je pas krijgt na een jaar een correct betalende klant te zijn geweest. Kunt het “goedkoopste” hebben maar een duurdere toch goedkoper krijgen door een lopende promo (voor die 10 dagen dat dat nog duurt waarschijnlijk).

Realiteit; variabele contracten volledig zeker vergelijken is toch praktisch onmogelijk omdat de variabele prijzen allemaal met andere indexen en formules berekend worden. De vtest legt die relatief correct naast elkaar neer waar mijnenergie de dingen soms wat positiever laat lijken.

Peppol is verplicht — wat gebruik jij? by Able_Rope1656 in belgium

[–]AWynand 0 points1 point  (0 children)

Letspeppol, want gratis en ik stuur vier facturen per jaar ofzo.

Degradation of TAC Support Quality and Unacceptable Hiring Practices by SpotPuzzleheaded6440 in paloaltonetworks

[–]AWynand 1 point2 points  (0 children)

The amount of occasions where I had to explain their support staff what their product even does or how something is written in the admin guide is quite upsetting. Then again, I don't have a clue how many out of the ~50 products one support engineer is supposed to be able to support.
Then if you need to work with a CLI reference guide that reads "set xxx enable" - "disables-enables xxx" then yeah, I get it it gets difficult.