When both a source address and a source user are specified, is the rule matchsource address AND source user?source address OR source user?My guess is #1, but I can't find documentation to back that up.Thanks,Bart
I have downloads available and click to download and it fails.show jobs all command reveals failed Downld jobs.clear job id fails with "Cannot stop job 683 at this time".TIA
Using PanOS 4.1.2 on 5020listing group mapping:show user group name "<DOMAIN>\<GROUP NAME>"we get something like this[1 ] <DOMAIN>\<name>.<surname>....though in "user id identification->group mapping settings" under "user objects"we discretely choose"Object Class: person""User Name: sAMAccountName"and browsin...
Hi Guys,Scenario: Palo Alto installed in Virtual Wire mode between HP 5412 L3 switch and Threat Management Gateway (TMG) simliar to ISA which is also a Proxy Server with port 8081. Traffic passes through Palo Alto for content filtering and works fine (10.0.0.0/8). Captive Portal was configured for wireless users on 172.16.0.0/16 network with ...
Hi all,I've read in an article that it's possible to intercept DNS requests with DNS proxy without setting PA IP address as the computer DNS Server.Following this article, I've enabled DNS proxy in a PA interface (inside), redirecting DNS request to a public DNS server; I've set up a DNS proxy rule to try to intercept the requests (for example, ...
Hello there, We noticed that wifi users often don't get ID/IP mapping reliably. Is there a way to tell Microsoft IAS/Radius to send UserID agent infos when they receive an accounting notice ?thank you
Have any body got such error message as below:domain: 1receive_time: 2012/02/13 19:10:00serial: 0002C123456seqno: 0actionflags: 0x0type: SYSTEMsubtype: generalconfig_ver: 0time_generated: 2012/02/13 19:10:00vsys: eventid: generalobject: fmt: 0id: 0module: generalseverity: highopaque: SSL connect error(10.2.1.1): 5, source: 10.3.1.250We got ...
Hi all,I have a username in my organisation that is domain\john.o'neill and I'm finding that when I try to do a query such as (user.src eq 'domain\john.doe') it's fine, but when I put in (user.src eq 'domain\john.o'neill'). I appreciate that this is because I'm esentially saying (user.src eq 'domain\john.o' ) but with neill' on the end.Is there ...
I am using a PA-2050 and OS 4.0.5 (plans to upgrade shortly to 4.0.8) with NetConnect. We recently started using AD for authentication and it's working very well with one exception: the users must enter the AD domain name in with their username. Ex: domain\usernameIs there a way to remove the need to enter the domain name if you are only u...
Hi,I am pretty new to PAN Firewalls, and my question is really basic.I would like to use only two interfaces on my Firewall : ethernet1/7 as my Lan and ethernet1/8 as my Internet Acess.I would like to avoid using Mgmt Interface port.I have found a thread which explains how to enable management on any interface through CLI. And it did worked well...
I figured it out !
Short question:Is inbound SSL decryption possible in vWire and/or Tap mode?Regards, Andreas
Hi, all we would like to better understand the QoS for setting "guaranteed"The question is: the "guaranteed" is pre-allocated or it's dynamic configuration?Suppose to have:5 Mbps of total bandwidth available; if we set guaranteed to 3 Mbps for calss 1 this means that default class(4) has automatically 2 M? Or the default calss (4) has a bandwidt...
Has anyone dealt with this url before? It seems like it's trying to call home as soon as my machine login and it's reating some issue with some of my user. Wonder if Palo can recognize it for now it just saying web-browsing app.thanks.
Hi,I have the PAN devices in the main datacentres that do DNS lookups for all clients globally. What I am trying to figureout is how to have those servers forward to the PAN and the PAN proxy off to external servers then filter the returns based on a URL filtering policy. Thus not having to use a service like Open DNS. The standard URL filtering...
PavelK
on:
handle (username) change?
PavelK
on:
Replacement of RMA
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 4 | |
| 3 | |
| 3 | |
| 2 | |
| 2 |
