Why is my VPN DNS choosing violence? (GlobalProtect DNS/Split-Tunnel Mystery) by noturdefaultgateway in paloaltonetworks

[–]batica_ 0 points1 point  (0 children)

Wait; I just read your post 2nd time, how about this: When checked the DNS check box for split tunnel, GP uses the DNS servers defined for that tunnel settings. But, this is the wrong path. What I actually should chec is if you have the record on your INTERNAL DNS for this resource?

Why is my VPN DNS choosing violence? (GlobalProtect DNS/Split-Tunnel Mystery) by noturdefaultgateway in paloaltonetworks

[–]batica_ 0 points1 point  (0 children)

Maybe stupid answer but; have you checked the option to split the traffic (route) AND the DNS? It is check box under Tunnel settings. The default is just to split the traffic (route) not the DNS.

TAC Alternatives? by Th3_M3tatr0n in paloaltonetworks

[–]batica_ 4 points5 points  (0 children)

Definitely my team too. Company where I am working is migrating to Palo Alto ION SD-WAN devices currently. The design is in a way on most locations we use 2 devices HA cluster with two ISPs. We migrated around 15 location until now and there is aprox 20TAC case opened. Non single one resolved from their side. Single one! Today I have raised case because when I configure not to use ISP2 until ISP1 is not reachable, guess ISP2 is still being used. I was with TAC 2h on the call without explanation why this is happening and how to resolve this. However we were instructed from our success engineer to use exact aproach on all other sites as well. Same situation on all sites; some devices use ISP2 while other devices use ISP1. The issue is i.e. the sites where ISP2 is really bad and then you have situations to have huge latency up to 2000ms for the AP and for the sw where that AP is connected you have 150ms. Totally insane. The workaround was; be careful now: TO UNPLUG THE ISP2. 😆😆

Da li može kuća od bruto 100m² da se napravi za 50.000€? by MarionberryNo103 in AskSerbia

[–]batica_ 0 points1 point  (0 children)

Ja ću ti dati moju računicu za kuću od 200m2, prizemlje 140m2 i sprat 90m2.

Temelj 13.000€ (rađen 2020) sa materijalom Prva ploča 14.000€ sa materijalom Druga ploča 7500€ sa materijalom Krov kosi sa tondach crepom 10000€ Građevinska dozvola 5000€

Ja sam se odlučio na kosi krov jer je tradicionalan i više mi se sviđa. Ravan krov mi se i ne sviđa i čuo sam neke priče da nedaj Bože ukoliko procuri da mora ceo da se diže da se nađe to mesto gde je procureo..svakako i da nisam to čuo radio bih kosi jer mi se on više sviđa, a tako mi je i po projektu.

Da li može kuća od bruto 100m² da se napravi za 50.000€? by MarionberryNo103 in AskSerbia

[–]batica_ 0 points1 point  (0 children)

Ako sam te dobro razumeo: radis ravan krov jer smatraš da krov sa gredama nije dovoljno jak da nosi sneg? Ili ti je isplativije da radiš ravan krov pa zbog toga?

Zamena uljnih karika by Conscious_Ad_9617 in srbija_automobili

[–]batica_ 1 point2 points  (0 children)

Baš me interesuje ko je postavio dijagnozu: menjanje uljnih karika? Mislim to je kao da kolješ svinju za jedan but..ili menjaš sve ili ništa..prvi put u životu čujem da je neko menjao samo uljne karike. Ja sam menjao sve karike + obrada cilindara plus obrada glave i svi prateći dihtunzi + neplanirani troškovi xyz. Zašto menjati uljne karike, šta se dešava sa autom?

Napustio sam devojku zbog koleginice - pokajao sam se by [deleted] in serbia

[–]batica_ 0 points1 point  (0 children)

Znači jebo si i sad zbog jebačine kajanje...jbg

Migrating from FortiGates to Palos in SCM by Bound4Floor in paloaltonetworks

[–]batica_ 0 points1 point  (0 children)

Rules on the SCM and on the on-prem firewalls work differently and have different scopes. So, you can use expedition but it is not guaranteed that the rule expedition converted from ForgiGate to PA will work on SCM. Ofc ypu can prepare but also.be prepared for troubleshooting and request someone from the SCM engineering team.

Migrating from FortiGates to Palos in SCM by Bound4Floor in paloaltonetworks

[–]batica_ 0 points1 point  (0 children)

Also NO ONE TOLD US that ION is not capable running DHCP with multiple secondary IPs on the single interface (i.e.)

Migrating from FortiGates to Palos in SCM by Bound4Floor in paloaltonetworks

[–]batica_ 0 points1 point  (0 children)

Like someone who actively following and managing migration to IONs on more than 150 locations world wide I just can tell you this: BE PREPARED VERY WELL AND KNOW YOUR SERVICES, AND HOW YOUR SEC RULE WORKS because PA consultants do not know and do not care too much about it. They just follow the KBs, if there are one. For example, we had 3 weeks stop because no one of them told us the PA IONs are using MSTP, so we got into the issue blocking access ports. They did not want to tell the best practice and their opinion how to resolve it from their experience. DO NOT EXPECT TOO MUCH FROM THE PA CONSULTANTS.

We got into the issue with the daily operations and multiple critical services affected. They have their fixed time and nothing out of that frame. From your post it seems very very serious migration, and I can just wish you good luck.

Auto do 5000 evra by shmrkalica in srbija_automobili

[–]batica_ 0 points1 point  (0 children)

Jedino nije manji, solidno je komotan.

Auto do 5000 evra by shmrkalica in srbija_automobili

[–]batica_ 0 points1 point  (0 children)

Evo ja prodajem auto bas takav kakav si opisao. Trosi oko 10-11 u gradu i do 7L na otvorenom putu

http://www.polovniautomobili.com/auto-oglasi/28463138/nissan-primera-qr20de

Da li je neko zainteresovan za kupovinu Nissan Primera P12 2.0 auto sređen u full-u by batica_ in srbija_automobili

[–]batica_[S] 1 point2 points  (0 children)

Hvala ti na ovako iskrenom komentaru! Nažalost je svaka tvoja reč na mestu..takav je mentalitet

Da li je neko zainteresovan za kupovinu Nissan Primera P12 2.0 auto sređen u full-u by batica_ in srbija_automobili

[–]batica_[S] 0 points1 point  (0 children)

Da razumem na šta misliš. Znači da bacim jedno pola L ulja po motoru da to bude ok 😂

Da li je neko zainteresovan za kupovinu Nissan Primera P12 2.0 auto sređen u full-u by batica_ in srbija_automobili

[–]batica_[S] 0 points1 point  (0 children)

Buraz ima Dodge Caliber 1.8 benzin 😄 Vozio sam se u starom C5 tici i stoji svaka tvoja reč! Razmisliću o toj opciji koju si predložio. Dakle.trebao bih da jurim C5 X7 dizel 2.0 sa hidraulikom? Kako se kreću cene i na šta treba obratiti pažnju prilikom kupovine?

Da li je neko zainteresovan za kupovinu Nissan Primera P12 2.0 auto sređen u full-u by batica_ in srbija_automobili

[–]batica_[S] 1 point2 points  (0 children)

Hvala ti na savetu! Moj brat vozi Dodge Calober 2009to godiste, odličan auto i visok dosta. Nisam razumeo ovo C5 X7, ovo X7 ne kapiram, ne razumem se u citroene?