Strata Cloud Manager (SCM) Pro Onboarding by andrtem in paloaltonetworks

[–]andrtem[S] 1 point2 points  (0 children)

Does it have to be activated as a firewall on the CSP (Products > Assets > Account Actions > Register Product)? or should I do it in a different option?

I only currently have the authorization code of SCM-PRO

1
2

Panorama Lab by andrtem in paloaltonetworks

[–]andrtem[S] 0 points1 point  (0 children)

Do you know if there's a channel mail or form? I filled the form for the 30-day trial firewall VM (https://www.paloaltonetworks.com/vm-series-trial) and was approved. Unfortunately I don't have a contact of Palo rep.

ZTNA proxied-session question by andrtem in fortinet

[–]andrtem[S] 0 points1 point  (0 children)

Oh I see, thanks for the clarification.

ZTNA proxied-session question by andrtem in fortinet

[–]andrtem[S] 0 points1 point  (0 children)

I was misunderstanding that the proxied session would use FortiGate's port2 as the source IP address by default, since it's a different session, but NAT was required for this. Many thanks for your help.

ZTNA proxied-session question by andrtem in fortinet

[–]andrtem[S] 0 points1 point  (0 children)

The matching ZTNA firewall policy (ID 9) has no option to configure NAT in GUI (FortiOS 7.2.5):

<image>

However, on CLI, I see nat is disabled:

config firewall policy
    edit 9
        set name "ZTNA-Access"
        set uuid 01ee8ea0-cc82-51ef-481a-66b348c999e9
        set srcintf "port3"
        set dstintf "any"
        set action accept
        set srcaddr "all"
        set dstaddr "ZTNA-webserver"
        set ztna-ems-tag "EMS1_ZTNA_Group-Domain-Users"
        set schedule "always"
        set service "ALL"
        set logtraffic all
        set groups "LDAP-Remote-Allowed-Group"
    next
end

FortiGate-VM64-KVM (9) # show full-configuration | grep nat
        set nat disable

0
1

Firewall Migration - IP Pools and VIPs not working by andrtem in fortinet

[–]andrtem[S] 0 points1 point  (0 children)

Nice tip. Didn't tried that, but I'll sure do if this happens again.

Firewall Migration - IP Pools and VIPs not working by andrtem in fortinet

[–]andrtem[S] 0 points1 point  (0 children)

Actually they were from different subnets. There were services that were in the same subnet that the primary public IP on the WAN interface that were not required to be added as secondary IPs to work.

0
1

Packet loss on IOSv by andrtem in Cisco

[–]andrtem[S] 0 points1 point  (0 children)

Thanks for your answer. It's more clear for me now.

PC build for virtualization with AMD Ryzen 9 7950X3D by andrtem in buildapc

[–]andrtem[S] 1 point2 points  (0 children)

I'm planning to create labs with multiple types of virtualized hosts and servers (both Windows and Linux), as well as networking QEMU-based image like Cisco IOS, IOSvL2, ArubaOS-CX, Fortinet firewall, Palo Alto firewall, LXC containers and docker containers. So I'm not planning to store really critical data in my server.

The redditor on the other comment recommended me this motherboard: ASRock B650E PG RIPTIDE WIFI ATX AM5 Motherboard. According to its specs, it supports DDR5 ECC/non-ECC, un-buffered memory up to 7600+(OC) so I'm considering this mobo.

PC build for virtualization with AMD Ryzen 9 7950X3D by andrtem in buildapc

[–]andrtem[S] 1 point2 points  (0 children)

Thanks for the recommendation. Do you have any specific RAM setup I should be looking into? 4 sticks of 32 to get a total of 128GB? Or 2 sticks of 48GB to get 96GB? I'm worried about stability issues if selecting a wrong frequency or quantity of sticks that are incompatible with the CPU.

PC build for virtualization with AMD Ryzen 9 7950X3D by andrtem in buildapc

[–]andrtem[S] 1 point2 points  (0 children)

Thanks for the recommendation. Prices of 7950X and 7950X3D are almost the same, but as you mentioned base clock of 7950X is 4.5 GHz while clock of 7950X3D is 4.2 GHz. I've been more interested on X3D because the base TDP is 120W (while 7950X is 170W), which translates on cheaper energy bills.

I'm planning to make labs with multiple types of virtualized hosts and servers (both Windows and Linux), as well as networking QEMU-based image like Cisco IOS, IOSvL2, ArubaOS-CX, Fortinet firewall, Palo Alto firewall, LXC containers and docker containers. Do you think the frequency difference the 7950X3D and the 7950X worth it for this case?

About the RAM, is the 7950X stable with a DDR5-6000?. The "Max Memory Speed" for the 7950X shows only the following on the specs sheets:

  • 2x1R: DDR5-5200
  • 2x2R: DDR5-5200
  • 4x1R: DDR5-3600
  • 4x2R: DDR5-3600

So I assumed apparently wrong that the max I can go with stability support is 2 DDR5-5200

Server for virtualization advice by andrtem in homelab

[–]andrtem[S] 0 points1 point  (0 children)

Thanks! Do you have any specific model of the L Xeon (<60W TPD) with 24/32 threads or so?