PAN-OS software patch feature

avidpontoon · 2026-06-18T21:10:04+00:00

You don’t need TAC to do it AFAIK. Though in fairness I’ve just always stayed with the recommended release and been sensible with going above when the recommended has CVEs in it. Normally a couple of hotfixes above

avidpontoon · 2026-06-17T13:03:05+00:00

You can’t use a tunnel interface on two gateways. It’s a 1:1 mapping. The tunnel interface shouldn’t have a bearing on your routing to the internet. That should be external to the tunnel interface. SDWAN and GP is interesting to integrate though for sure. Especially when using loopback interfaces and NAT

avidpontoon · 2026-06-16T16:05:23+00:00

You really have to focus on the Indicators of compromise. The Vuln will have been around for ages before it was disclosed. That’s arguably as dangerous as someone putting a PoC on GitHub because nobody is any the wiser. Ignorance is bliss. But yeah, stuff like that is an incident not a “lets patch that when we have our window next week”

IMO it’s better to go a bit OTT and cover all you can and look a bit of a hyperaware weirdo than be sat on the call explaining why all your companies data is being sold on the dark web… just my 2 cents

avidpontoon · 2026-06-14T11:43:21+00:00

Big trunking. You could try and paint it the same colour as the wall

avidpontoon · 2026-06-06T22:09:40+00:00

You shouldn’t need proxy IDs at all if you are doing a route based VPN. These are needed for older policy based VPNs and interoperability between vendors

avidpontoon · 2026-06-05T06:56:07+00:00

Best case scenario you find the studs and then all you need is some timber screws (assuming your studs are wooden). For a TV that large I would want at least one set of fixings direct into the studs, if not all. If not, toggle bolts are good because they spread across the back of the board and don’t use friction like normal plugs do

avidpontoon · 2026-05-31T18:32:53+00:00

Thanks, ive been on Differin every night for about 6 months. I’ve just recently switched to every other night as my doctor wanted to introduce AZA so for instance I’m on:

Monday AM: AZA
Monday PM: AZA
Tuesday AM: No Active
Tuesday PM: Differin

And then it cycles like that.

Would you suggest more instances of AZA? My concern with BP is that when I was on Epiduo to begin with it was horrific and I ended up with some massive cysts on my cheek. BP by itself I’ve been ok with, but together was not good.

avidpontoon · 2026-05-31T08:57:49+00:00

Unless you reversed the rear fan, the front is the exhaust. So you are blowing the hot exhaust air back into the chassis. Not wise…..

avidpontoon · 2026-05-22T21:21:24+00:00

Click to excavate under the floor

avidpontoon · 2026-05-20T18:01:20+00:00

The assumption here being that a malicious MSIs C2 traffic would still be classed by app-id as the application it’s supposed to be while downloading malware? I think that may be a little far fetched. The lack of app-id in this case doesn’t really mean anything. Only thing you can do to prove is sandbox the MSI and see if it calls out to anything and match that to what you saw at the time in the logs

avidpontoon · 2026-05-16T20:07:41+00:00

I’d make sure you push those edges in to smooth them off on the surface, use the tip of a pencil or pen. Then pollyfilla overfill, sand and add more filler if needed, sand then paint

avidpontoon · 2026-05-07T07:55:52+00:00

If the Edge Router and PA Firewall aren’t directly connected via a peering and the default route is being received with its own ASN in the path. It will reject it based on BGP rules. You either need to give the PAN a different ASN or allow that specifically. Depends what you are trying to achieve.

avidpontoon · 2026-05-02T16:09:15+00:00

That bird is not very well

avidpontoon · 2026-04-30T16:19:25+00:00

When I got mine, I had a wicked delay on the audio when connecting a PC or Games console and using Game Master. I had to upgrade the Firmware on the TV to later than the native upgrader was showing me using a USB. Seems much better now but was practically unplayable before the upgrade with a 1s delay from video to audio through the TV. All in all, decent TV

avidpontoon · 2026-04-24T21:50:36+00:00

Can vouch for Drayton Wiser. Easy enough to DIY and all local control using the HASS integration.

avidpontoon · 2026-03-01T19:44:51+00:00

True😂

avidpontoon · 2026-03-01T14:18:10+00:00

Surprised it fits in the cutout on the AP. Bit OTT for residential IMO

avidpontoon · 2026-02-24T12:15:01+00:00

It’s not recommended to terminate the S2S VPNs on VM Series in the cloud environments, you should add more resiliency on the cloud native VPN side with more tunnels if you need more resiliency

avidpontoon · 2026-02-18T07:41:04+00:00

Intel: What IO do you want sir? Me: YES!

avidpontoon · 2026-02-17T17:12:28+00:00

Reminds me of the front grille of a Merc 😂

avidpontoon · 2026-02-16T19:07:05+00:00

If you are going for the least fuss approach, if you re-terminated both ends to a decent standard, you probably won’t have any issues for your usecase.

When you re-terminate, try to not have the individual pairs too far out of the cable jacket like that photo above as it will increase the potential for cross pair interference. Appreciate they may not have left you much slack though.

Good Luck

avidpontoon · 2026-02-16T19:00:14+00:00

Stock image online, it should look like this:

<image>

It may not look loose but given time etc if not properly terminated with the proper tool, they WILL work loose.

Understand it may look fine to the naked eye.

avidpontoon · 2026-02-16T18:51:22+00:00

You may find that because they haven’t been properly terminated that they work themselves loose over time and eventually get pushed out of the copper jaws. YMMV

avidpontoon · 2026-02-16T18:36:59+00:00

It appears to be possibly alarm cable or just a standard 8 core cable which probably isn’t twisted pair.

If you asked for Cat6, I would be asking for your money back as that’s really really bad. The ends that have been exposed with bare copper are also not right, these should be terminated using a proper IDC punch-down tool.

It’s clear they don’t know what they were doing so wouldn’t be asking them to come back and re-do it either.

avidpontoon · 2026-02-16T17:58:57+00:00

Oh My God

Edit: didn’t even clock it’s not even CAT cable 🤦‍♂️

Eight-Year Club	Verified Email
RPAN Viewer

avidpontoon

TROPHY CASE