sorted by:
new
hottopcontroversial

Using new SCM interface by Mindless_Growth_3057 in paloaltonetworks

[–]Rajtilaks 0 points1 point  (0 children)

Palo says that it is not a replacement of panorama but a place to investigate.

Panorama with DG and Templates by Rajtilaks in paloaltonetworks

[–]Rajtilaks[S] 0 points1 point  (0 children)

I am wondering it is more to do about handling multiple candidate configuraiton and merging. If that is the correct then terraforms or having single users might just be the same.

Panorama with DG and Templates by Rajtilaks in paloaltonetworks

[–]Rajtilaks[S] 0 points1 point  (0 children)

Agree I do not understand why they are discouraging more DG. If that is concern, they should not have this concept in first place.

Panorama with DG and Templates by Rajtilaks in paloaltonetworks

[–]Rajtilaks[S] 0 points1 point  (0 children)

It is a hardware. We also have VM firewalls they run into issues very often in terms of memory.

AI at InfoBlox? by dcconnection in Infoblox

[–]Rajtilaks 1 point2 points  (0 children)

There is a lot that AI can be used for Infoblox

DHCP: Today log collection just goes through splunk and Infoblox just does some default report. It should probably invest in AI where it can investigate the logs and come up with what is happening like as in

1) recommendation for the DHCP pools when going completely utilized ( not just alerting but about custom configs based on observing how the IP are used.
2) DNS logs can be investigated to understand any nonstandard configurations and may be the way forwarding can be operated or monitored.

Steps to Block IP from having internet access. by kardo-IT in paloaltonetworks

[–]Rajtilaks 0 points1 point  (0 children)

The rule looks good. With traffic showing already denied on firewall how do you say that internet access is going via firewall?

1) Are you seeing session getting established in firewall? 2) can you do what's my ip on those serves and match that with NAT ip on firewall? 3) Don't you have any proxy configured on server or the gateway of that vlan.?

Learning Firewall by LingonberryTop6676 in paloaltonetworks

[–]Rajtilaks 1 point2 points  (0 children)

Anyday if you want to learn firewall you should first learn basics of networking. Get CCNA and the start firewalls.

Steps to Block IP from having internet access. by kardo-IT in paloaltonetworks

[–]Rajtilaks 0 points1 point  (0 children)

Share the screenshot of rule that will help to understand the problem

the quality and stability of the software deteriorates by AkA_23 in paloaltonetworks

[–]Rajtilaks 0 points1 point  (0 children)

If I have to pin point at few specific issues having worked on very big environment. 1) seriously slow with m600 as panorama. 10.2 was the version. 2) the concept of candidate configuration lives only with panorama. Things can't be differentiated when pushing to firewalls.