thundercats Posted July 22, 2024 Posted July 22, 2024 Thanks alot for sharing this. This works perfectly and for now I have used basic firewall policies and NAT Rules and not gone through NGFW features yet I am using below qemu options: -machine type=pc,accel=kvm -nographic -rtc base=2021-09-12,clock=vm I have given 6Gigs of RAM so that these devices boot up a bit faster. However I see some issues in terms of logs: 1. The logs I can see are only from inside to outside interfaces. 2.I don't see any logs between lets say DMZ to outside or DMZ to inside as an example. 3. I override intra-zone-default to log at both session start and end but it still don't generate logs neither I see hits if their is any issue in rules. 4. I created an explicit DENY_ALL rule to overcome issue with point 3 above, I can see hits on that rule but again don't see any logs in monitor tab. Can someone let me know how to figure out these log issues:
thundercats Posted July 22, 2024 Posted July 22, 2024 It got fixed after I ran below command on CLI: debug software restart process log-receiver
thundercats Posted July 26, 2024 Posted July 26, 2024 update: I tested below till now and found not working: 1. USER ID doesnt work. I was able to connect to AD and can even see user groups but in show user ip-user-mapping all it shows nothing no matter what I tried. In the end I exported the config to an unlicensed Palo Alto 10.1 and it all started working.
juning Posted August 10, 2024 Posted August 10, 2024 On 10/3/2021 at 4:09 AM, netkillui said: Hidden Content Give reaction or reply to this topic to see the hidden content. Hidden Content Give reaction or reply to this topic to see the hidden content. Hidden Content Give reaction or reply to this topic to see the hidden content. In case qemu vm shuts down after changing password, add '-rtc base=2021-09-12' in eve-ng node options to boot with valid time period. ty 5 1
kechik Posted September 11, 2024 Posted September 11, 2024 Hi. is it still work this image? i'm try to spin up in pnetlab but it cannot start. Thanks 1
rivancorp Posted October 22, 2024 Posted October 22, 2024 On 10/3/2021 at 4:09 AM, netkillui said: Hidden Content Give reaction or reply to this topic to see the hidden content. Hidden Content Give reaction or reply to this topic to see the hidden content. Hidden Content Give reaction or reply to this topic to see the hidden content. In case qemu vm shuts down after changing password, add '-rtc base=2021-09-12' in eve-ng node options to boot with valid time period. amazing 5 3
DKG Posted November 28, 2024 Posted November 28, 2024 (edited) Thanks! Edited November 28, 2024 by DKG
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now