PANOS High Latency Under Esxi
In a fully wired VMware lab using a virtual Palo Alto (PANOS 8.1.14-h2) VM-50 I could see really rather high latency:
That did not make sense for a wired LAN. After some internet based digging I found this:
Is higher latency normal on a VM compared to hardware?
This referred to some rare issues with virtual Esxi Palo Alto’s and intel’s DPDK. Following the referenced link takes you to a Palo Alto support page showing you how to disable the DPDK which as it states in enabled as default.
Creating a Storage Space in Windows 10 with Powershell
I’m not sure if this is due to system in question being in the insider fast ring (Build 19041 version 10.0.19041), however when trying to create a storage space via the GUI I got the following error:
Can’t prepare drives Close all applications that are accessing the drive and then try again. The parameter is incorrect. (0x00000057) You have to make sure the disks are clear of partitions otherwise they will not even appear in the create storage pool wizard.
Searching for a DHCP Lease by MAC Address in Active Directory Forest
In a previous post (3 years 4 months 2 days ago) I wrote about searching DHCP leases directly on a DHCP server which was rather limiting especially if you are in larger network. These days I use the following script from a management desktop running RSAT which automatically lists authorised DHCP servers in the forest and searches though all scopes:
$AllDhcpServers = Get-DhcpServerInDC $result = @( @($AllDhcpServers).foreach({ @(Get-DhcpServerv4Scope -ComputerName $.DnsName | Get-DhcpServerv4Lease -ComputerName $.
Installing Raspotify on ARM64 Architecture Raspberry Pi
On installing Raspotify on a new build of Ubuntu 19.10 for Raspberry Pi I saw the following error:
Raspotify installer only runs on a Raspberry Pi Not too much information there. Going through the manual install procedure you end up something more meaningful:
N: Skipping acquire of configured file ‘main/binary-arm64/Packages’ as repository ‘https://dtcooper.github.io/raspotify raspotify InRelease’ doesn’t support architecture ‘arm64’ So unpacking that a bit it seems that in switching to using Ubuntu Server from Raspbian on my Linux Spotify connect Raspberry Pi’s the architecture is ARM64 (ARMv8) rather than using armhf.
Palo Alto Firewall PANOS HA Upgrade Guide
This is my process for upgrading HA Palo Alto firewalls. Some steps will depend on your HA configuration; if you are not using preemption then you can’t disable it etc. So where possible refer to the official documentation. To start off you should take named snapshots of the config and export them off the firewall just to be safe. Below are the steps:
Primary
Disable preemption, commit Fail over the firewall, CLI: request high-availability state suspend Note this will fail over the firewall Check connectivity now the secondary is active Install update and reboot After device has rebooted log in and check the tasks for a successful autocommit, CLI: show jobs all Enable HA, CLI: request high-availability state functional Secondary
Ubuntu Server Static Network with Netplan
Since Ubuntu 17.10 Artful, ifupdown has been replaced with Netplan. After each session trying to remember how to configure Netplan I seem to forget the locations and syntax. So this is for my aging memory. The configuration files for Netplan live in:
/etc/netplan/ The default install of Ubuntu 18.04 leaves the following file:
/etc/netplan/50-cloud-init.yaml As you can see the config file is in yaml. Unless specified manually the default install will give a simple file using DHCP.
PANOS CLI Commands to Debug Palo Alto Logging Service
The Palo Alto Networks Logging Service enables firewalls to push their logs to Cortex Data Lake (CDL). If a firewall is having issues connecting you can try the following. Check the logging service license is installed:
request license info You should at least see the logging service license among the returned licenses. If not then things are not going to work. If the license is there and you still have issues then try the following to refresh the key and the certificate.
Posting Images In Hugo From VS Code
Trying to remember something I previously knew; how to insert images into posts. Using VS Code on macOS and the Paste Image extension you can copy the image into the clipboard using cmd + ctrl + shift + 4
Once in the clipboard you can paste the image into VS Code using cmd + alt + v. See below:
Paste Image will copy the file into a folder and create the link in markup.
Installing RSAT on Windows 10
As of the Windows 10 October 2018 update, installing the Remote Server Administration Tools (RSAT) has changed:
Starting with Windows 10 October 2018 Update, RSAT is included as a set of “Features on Demand” in Windows 10 itself. See “Install Instructions”
So rather than a separate download RSAT has joined features on demand. This is an improvement in my opinion as the install is closer tied to the OS. Previously you would have to wait for the tools to be updated for newer versions of windows and that did not seem to happen very quickly.
Migrating Site… Again!
2019 and a brand new post. Things have moved on so it is time to move to something new. In this case out with Jekyll and in with Hugo! So this calls for a brand new page.
I guess I’m going to have to workout markup~~…~~