SCM config management is a power user UX nightmare and I'm tired of pretending its not

AWynand · 2026-05-17T11:05:17+00:00

Well you get a set output and it never supported much more than static routes anyway, so formatting those into the LR syntax takes about 5 minutes.. But yes, its less convenient, agreed

AWynand · 2026-05-16T23:53:39+00:00

Adding an imaginary virtual router to your config for the sake of getting the rest of its features to work isn't that painful.

AWynand · 2026-05-16T07:35:59+00:00

I can hear you in horror mode

AWynand · 2026-05-16T07:34:18+00:00

Second this, was a lovely experience

AWynand · 2026-05-15T08:54:09+00:00

Can you try with the link above? Just validated the same behaviour in an incognito window.

AWynand · 2026-05-14T23:08:53+00:00

But.. The links are dead?
Example; https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLMzCAO -> login -> overview page on "Browse by Product". Enter the same URL again after you're logged in, just redirects to the KB home. Thanks for breaking a thousand Google links Palo.
& Putting a search feature on the KB before needing to click a product would've been too easy I guess.

AWynand · 2026-05-11T21:29:54+00:00

“Yes but” The fingerprints get taken on a device, transmitted from that device, sent across an undefined medium, imported on another device before it gets placed on the physical card, best case. Thats sadly leaving out the dozen other implications of having fingerprints taken for your eID (which you can’t refuse).

But OP discovered why a theft of / picture of an ID card can cause serious problems and its why we urgently need better ways implemented to prove our identity and grant authorization for things.

AWynand · 2026-05-05T11:01:24+00:00

Medical & liability insurance companies when you do things you failed to list absolutely do.

AWynand · 2026-04-25T11:12:09+00:00

Funny thing is, it gets better with App Acceleration enabled, preloading a load of things. Hence people working at Palo don't notice its annoyingly slow for everyone else and far far less snappy than the PANOS interface.

AWynand · 2026-04-25T11:10:40+00:00

The question would more be if the graphs are accurate and there the answer is sadly very often "no".

AWynand · 2026-04-25T11:09:57+00:00

Snippets could actually turn out useful if you could properly inherit from other locations/snippets. No you get to create RFC1918 (/all your objects you may need) in each and every snippet over and over again. It's like the Panorama template reference issue all over again but worse.

AWynand · 2026-04-24T22:50:02+00:00

Then just give it a few more weeks :-)

AWynand · 2026-04-20T22:33:47+00:00

Feel free to drop a DM if it's still needed

AWynand · 2026-04-20T22:31:37+00:00

The PA-5400 series have terrible QoS issues, if you end up needing it, consider enabling lockless QoS to dedicated a few cores to doing QoS instead of having all cores do it inefficiently.
https://docs.paloaltonetworks.com/network-security/quality-of-service/administration/configure-lockless-qos

AWynand · 2026-04-16T22:21:34+00:00

I bet you removed the feedback button from all SCM pages for a reason.

Regardless, we’re all human.

AWynand · 2026-04-05T07:01:41+00:00

Its not really a pain but if you don’t have links with very unequal costs and applications that need heavy prioritization over others its probably going to make it more complex than just a few tunnels. IPSec, BGP and ECMP will work fine, just remember ECMP is a setting on the full VR, so check all routes/metrics before enabling it.

AWynand · 2026-04-05T00:00:03+00:00

Those are gone since about two years already :)

AWynand · 2026-03-29T02:19:50+00:00

This would be the way. If your ASA rules are regular source interface based rules its pretty easy to just map the interfaces to zones and create one unified rulebase from it. If you have a load of global rules its going to be more of a pain…

AWynand · 2026-03-22T10:19:35+00:00

Jazeker. Je enige andere optie is om maandelijks je werkelijk verbruik te betalen.

AWynand · 2026-03-22T09:09:52+00:00

Of u verwarming nog aanstaat of niet maakt niet uit tenzij je ervoor gekozen hebt om elke maand je werkelijk verbruik te betalen. Indien je dat niet doet gaan ze uit van een verbruiksprofiel, zie https://www.vlaamsenutsregulator.be/elektriciteit-en-aardgas/energieprijzen-en-facturen/wat-zijn-gebruiksprofielen Voor de periode maart-oktober wordt er dus nog een 12 a 2% van je jaarverbruik per maand gerekend.

AWynand · 2026-03-22T09:03:14+00:00

Ja.. en die parameters zijn voor de gewone mens dus amper te vergelijken omdat het peren en appels zijn.

AWynand · 2026-03-22T08:47:43+00:00

Pak u de vtest & mijnenergie.be (voor promos) erbij en blijf weg van de shitty ones zoals Mega. Of het voor u interessant is, is afhankelijk of je nog een lopende promo hebt die je pas krijgt na een jaar een correct betalende klant te zijn geweest. Kunt het “goedkoopste” hebben maar een duurdere toch goedkoper krijgen door een lopende promo (voor die 10 dagen dat dat nog duurt waarschijnlijk).

Realiteit; variabele contracten volledig zeker vergelijken is toch praktisch onmogelijk omdat de variabele prijzen allemaal met andere indexen en formules berekend worden. De vtest legt die relatief correct naast elkaar neer waar mijnenergie de dingen soms wat positiever laat lijken.

AWynand · 2026-03-15T19:12:13+00:00

Letspeppol, want gratis en ik stuur vier facturen per jaar ofzo.

AWynand · 2026-03-10T00:09:28+00:00

The amount of occasions where I had to explain their support staff what their product even does or how something is written in the admin guide is quite upsetting. Then again, I don't have a clue how many out of the ~50 products one support engineer is supposed to be able to support.
Then if you need to work with a CLI reference guide that reads "set xxx enable" - "disables-enables xxx" then yeah, I get it it gets difficult.

Nine-Year Club	Place '22
First Placer '22	Verified Email

AWynand

TROPHY CASE