Hi, How do I commit and push from management server (panorama )to the firewall devices
@saymonvanz620227 күн бұрын
thanks for the content, I hate who watch and not like it
@no-blink404Ай бұрын
Hi, please could you tell me the file names of the .bin and or .image IOS images you are using? I'm looking for IOS images that have all the functionality required for the ENCOR and ENARSI exams. Thanks
@crashover6711Ай бұрын
thanks for help!
@janblahutaАй бұрын
No probs.
@ipsonuserАй бұрын
it would be great if you could show the actual traffic flowing I have green light , branch to branch is up but no traffic passing through between them...
@janblahutaАй бұрын
Hello, do you have a path policy applied ?
@SandeepTomar-cb6kdАй бұрын
Hello Sir, Problem is that directly connected to interface are not ping through peer routers,, and also paloalto are not pinging to directed connect to routers....we use also sources and host also use
@janblahutaАй бұрын
Hello, I don’t understand what you are asking for. Please, let me know if I could be any help with PA config.
@udayshankar46242 ай бұрын
'cfg.general.need-acknowledgement-to-login': NO_MATCHES what is the isuue
@jamierice93132 ай бұрын
Jan, do you know if you lose your license if you close your eve-ng lab. I’m curious to know if you have to deactivate license prior to closing lab. Or when you create a new lab? Just purchased vm credits for Palo and panorama.
@janblahuta2 ай бұрын
Hello, no license stays there. I am constantly changing between labs, so closing and shutting down the devices and license stays on PA firewall. Regards Jan
@jamierice93132 ай бұрын
@@janblahuta but when you create a new lab does it need another license? Trying to see how I’m going to be able to create different labs and keep same license. Only have 34 credits 😅.
@fantasycuber50562 ай бұрын
Hey Jan Are you running eve-ng on Apple Silicon or is in still intel ? I have heard you can run eve-ng on apple silicon.
@janblahuta2 ай бұрын
Hello, I have only tried it on Intel based silicon. Never tried it on Apple silicon. JB
@RishiRap3 ай бұрын
waste of time. High resolution. Too small of font size. can't see sh-!t.
@user-ys7mw9oy4b3 ай бұрын
Thanks!
@janblahuta3 ай бұрын
Welcome!
@arjunjain64303 ай бұрын
Thanks for sharing !!!
@irvingsanchez42583 ай бұрын
Suscrito (suscribed)
@inspirationcity3 ай бұрын
Hello, I see that you use EVE-Ng for your simulation, and it looks fast, is it on the bare-metal or you have it installed on ESXI? Thanks.
@janblahuta3 ай бұрын
I use bare metal (aka on spare PC) or I run it in google GCP cloud.
@ao31884 ай бұрын
excellent video, thank you clear clarification
@cyclefour34084 ай бұрын
Please do you have training class for Palo Alto SDWAN ION and Prisma Access SASE Security: Design and Operations.
@janblahuta4 ай бұрын
Hello, I hope you are well. Thanks for your message. The short and swear is no, I do this just as a hobby on youtube. I am planning to release some additional full course PA courses on youtube, but at the moment I don't have anything officials.
@mosd87104 ай бұрын
Good lab, thanks for that
@Riya.794 ай бұрын
Good explanation
@prasaddahiwadkar21825 ай бұрын
Hi Jan, I tried earlier to modify the existing security rule without re-running the Ansible playbook of existing security rule and adding into it the required objects but it was no success. Is it possible by using gathered_filter="*" in task for existing security rule and creating next task for adding the new address object in source or destination or service as per our requirement. This will avoid using playbook of existing security rule when we need to add source or destination or service object in existing security rule. This will help if we have rule in which we have too many address objects in all fields.I tried this but its successful not sure I am missing anything. In my case when first task is executed to fetch the details of existing security rule it changes the existing security rule making all fields "any". Exploring this now through xpath script. Let me know if you have any solution to this. Appreciate your work for explaining the Ansible.
@janblahuta5 ай бұрын
Hello, this is very nice issue, let me try to lab it and come back to you probably in next few days. Jan
@prasaddahiwadkar21824 ай бұрын
@@janblahuta any solution on this issue.
@kennedyjombo99816 ай бұрын
Thanks!
@prasaddahiwadkar21826 ай бұрын
Hi Jan, I want to add source IP address through Ansible playbook for Paloalto firewall in existing security rule but when I add the new source IP address all the existing configuration of security rule goes and I can see only newly added IP address under the source where as all parameters changes to "any". Do you have idea how to update the existing security rule for example source IP address while retaining other parameters in security rule.
@janblahuta6 ай бұрын
Hello, thanks for your questions. Just working on a new video and I will include this topic in it. Should be out in next few days.
@user-ns9qk4vv6k7 ай бұрын
how long are old "commit" configuration saved for ? is there a default time set
@janblahuta7 ай бұрын
Thanks for the question. Do you mean "SAVE" function - then it will be forever or until is overwritten with another commit.
@user-ns9qk4vv6k6 ай бұрын
ok noted, thanks@@janblahuta
@user-ns9qk4vv6k7 ай бұрын
Good infos keep it going.
@janblahuta7 ай бұрын
Thanks, will do!
@user-ns9qk4vv6k7 ай бұрын
Thank you again for the these videos, I set up a palo vm lab in Eve-ng but your videos are litterally super helpful, gave me a hands-on like experience.
@janblahuta7 ай бұрын
Great to hear!
@medir-acao7 ай бұрын
Thanks, Jan. I began my studies for the CCNP Encor.
@janblahuta7 ай бұрын
Glad it was helpful!
@janblahuta8 ай бұрын
Do you study for CCNA or any other Cisco exam, if yes for which one?
@kabazulkifil1588 ай бұрын
Easy way of explaining ❤
@janblahuta8 ай бұрын
Thanks a lot 😊
@MegaKobi18 ай бұрын
I love your straight-to-the-point demonstration-oriented teaching. That's how a video based teaching like KZbin should be. Not exhaustive theoritical intro like reading a book. Thank you Jan.
@janblahuta8 ай бұрын
Wow, thank you!
@daytech17118 ай бұрын
hello, can you help me. now i'am use ansible 2.14.9. i want to create rule with specific position in paloalto 10. i'am already to try but not solved until now
@dastgirshaikh90858 ай бұрын
Hey @Jan Blahuta- Thank you making this video, Can I know where I can get a PA FW license for the LAB environment?
@janblahuta8 ай бұрын
Hello, thanks for the message. The best way is to approach your local Palo Alto representative and ask for one for lab. They should be able to supply one.
@janblahuta8 ай бұрын
Do you study for CCST?
@debabratasinghabiswas30879 ай бұрын
That is an excellent explanation. Thank you.
@bilalkarruch73269 ай бұрын
Can u make a video about how to create a Prisma sd-wan? I'm actually trying to create my own lab but i haven't been able to figure how.
@janblahuta9 ай бұрын
Hello, Thanks for the comment. Now this is 1mil dollar question. A far as I know there is at the moment no way to spin a lab at the home. I have already asked Palo about it. I know that you can get controller in VM to install on your hardware, However, no news if you can request this from PA and then spin it up with virtual IONs. I am investigating the options and If I figure it out how to do it at home I will tell you. At the moment, I am using lab that has actual hardware and cloud controller provided by Palo. I will keep you posted.
@cristiansolis20549 ай бұрын
Nice, I have 28 CE credits rigt now, I only need 2 for my CCNA re-certification, do you know other way to ear 2 CE credits?
@janblahuta9 ай бұрын
Hello, Thanks for the comment. One of the free CE credits offering just finished on 17th of November. I think some new CE offering will come soon. As soon as I will get the email I will let you know. Good luck with studies! JB
@sridharbvnl21019 ай бұрын
very useful
@janblahuta9 ай бұрын
Glad to hear that
@aumatto9 ай бұрын
mate legend!! thanks for this! :)
@janblahuta9 ай бұрын
Please, let me know what other BGP topic you want to cover ;)
@arshad45499 ай бұрын
what is mac book verison ? is it M1 pro chip or m2? how you run eveng
@janblahuta9 ай бұрын
Hello, I have two instances of EVE-NG, one running on Linux server and second on Google cloud. I don’t run eve-ng locally on my MAC. Btw I have MAC Air M1
@arshad45499 ай бұрын
cant you install? and what is google cloud cost for running big ccie labs @@janblahuta
@divyasinghphougat852010 ай бұрын
Keep at it. Wish you lots more like subs and share. Good content.
@janblahuta10 ай бұрын
I appreciate that!
@divyasinghphougat852010 ай бұрын
You can take up topic like explaining Mpls and side to side vpn Comparisons and BGP routing
@janblahuta10 ай бұрын
I will be adding SDWAN topics, stay tuned ;)
@divyasinghphougat852010 ай бұрын
Good topic.
@ronnysusanto675511 ай бұрын
Thank you for this video! Definitely new to Palo Alto and your videos make it very clear! Thanks for the tips!
@janblahuta11 ай бұрын
Glad it was helpful!
@djenieart627711 ай бұрын
Please can you help me with a lab. If yes please give me a contact to join you. tks
@janblahuta11 ай бұрын
Hello, help with which LAB? Thanks Jan
@CuriousCosmophile Жыл бұрын
If we are activating license through panorama which has access to CSP and devices are also registered on CSP, does it requires device/panorama to restart ??
@janblahuta11 ай бұрын
Sorry for a late reply, as far as i know reboot is not required. If you have your service route set up correctly it should be just a refresh in GUI. Thanks Jan
@CuriousCosmophile11 ай бұрын
Yeah, done with it and went quite seamless🙌🏻
@trongthuybka8 ай бұрын
@@CuriousCosmophile @janblahuta help me, If I renew my license using Licenses activation via Auth Code, will the device be restarted or interrupted? Please answer me, thank you.
@CuriousCosmophile8 ай бұрын
@@trongthuybka No, there won't be any restart required or there won't be any interruption in normal traffic flow of firewall. Only one thing you have to make sure is Firewall having access to Internet and CSP.
@trongthuybka8 ай бұрын
@@CuriousCosmophile Thank you for your reply, my customer does not have a CSP portal account, so he authenticates through sing Licenses activation via Auth Code, the device can connect to the internet, I am about to renew, any answers will help. are all highly appreciated
@donovan7 Жыл бұрын
Promo sm 🌈
@kaung5628 Жыл бұрын
Hi, How can I capture 2 or more interfaces simultaneously?
@THERE.ARE.4.LIGHTS. Жыл бұрын
Hi. I do like your genuine take on failing is part of learning (and success)! I am curious what path you have taken for your CCIE recertification. Is it all Continuing Education (CE) credits? Or have you chosen to take a written exam? Lastly, is your new recertification date Jul 20, 2026? I'm trying to figure out if completing recertification early would impact the next recertification date. Thanks.
@NostalgistGuy Жыл бұрын
Thank you for contributing to Palo Alto community. looking forward to more and more content