When setting up virtual systems, what are the general guidelines for settings in the resources tab. Do they have to be filled in with a number? If left blank, how does the system divide resources?
Hmm, Page 148 of the 4.0 Admin Guide lists all the category actions except 'none'.What is 'none'? It doesn't seem to do anything. If i select it and click OK, the action has gone back to 'allow' when I reopen the URL profile.I have two main pools of users: employees and students.I'd like to make custom URL categories for employee-block, employee...
Hi, I have a pair of PA 2050 in cluster and the synchronization was working fine until I try to enable the option Session Cookie in the Captive Portal configuration. The only way I have find to re-synchronize my cluster is to disable the Session Cookie option, restart management server, synchronize secondary on the primary and vice versa. ...
Hi,I'm doing a configuration with global protect that working fine on my pc (laptop with Win 7). But when the real users doing the same with their pc's (Desktop with Win Xp) it dosent work, Global protect give the good message to the user but doesn't give access. When I look into the HIP Match monitor I see that the source users IP address are r...
Can anyone help with setting up GP to use certificates from an external CA ? Ive managed to get it working using an internal CA & signing the server & client certificates defined in the portal against that - but Im struggling to get it working when I use an external CA to generate the certificates; where Im trying to get too is that we p...
Hi guys.Nowadays BOTNET C&C server have been using Command and Control channel using twitter, skype IM and other IM like attached image.So I wonder about how do PA deal with BOTNET channel traffic using application. I tried to find that any signature on virus, spyware and vulnerability but cannot.Thanks.Regards.Roh.
Hello guys.I tested for now about active-active pair on vwire mode that is simplest deployment I know. but I could not find that more information for active-active HA pair on vwire.I wonder about that A-A vwire needs ACTIVE-ACTIVE configuration such as HA3 packet forwarding, Session owner selection, Session Setup. I guess that are not needed but...
Has anyone had any experience with this Comscore app this article is speaking of? http://www.cleveland.com/business/index.ssf/2011/08/privacy_lawsuit_targets_comsco.html If anyone has found it and logged the traffic I would be greatful if you post it so we know what to deny.. I'd rather not install it just to watch the traffic.. Both sites are ...
When using the Cryptocard authentication server we have had issues where no radius packets are coming through the PA500 on version 4.0.1. When the packet capture (tcpdump) was run no packets appeared on the interface.....The only way to solve this problem was to upgrade to 4.0.4, the latest release. Magically this worked. I require some sort o...
HelloCan i directly upgrade from version 3.1.6 to version 4.0.4ThanksEnayat
Hi,In the GUI the PA is resolving ip address by quering the dns server. But with CLI commands like ping and traceroute it doesn't seems to do DNS resolving. I think it should be because there is a CLI command no-resolve.Any ideas why it isn't resolving in the CLI?
Hihas anyone encountered the following error.When i type the following commandenayat@fw-tec1-pa2050>show user ldap-server stateLDAP server HO_LDAPBind DN : zajil\fwadminBase : dc=zajil,dc=comGroup Filter: (None)User Filter: (None)Servers : configured 1 servers192.168.100.10(389)Last Action Time: 55 seconds ago(took 8367389 seconds)Next Act...
I need to run user Identification of a Sun-One LDAP server, that has two main classes for users, totalling 300,000 users, in one geographic location.What is the maximum number of entries a user-id agent can handle/cache etc?Would the best configuration here, be to use multple agents, and hae each agent pull UID's using the object class filter?So...
Hi All; IS there an updated document for the PAN agent for the latest version?
we're having a problem with logging into servers in our network that connect to an ldap server that is behind the Palo Alto firewall. The PA recognizes the sessions as ssl going over 636/tcp. Our rules allow these connections, and most of the time when we try to log in to a server that authenticates with the ldap server behind the firewall it wo...
reaper
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
| Subject | Likes |
|---|---|
| 5 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 8 | |
| 6 | |
| 6 | |
| 4 | |
| 2 |
