Hi, We would like to run a script for the users when GP VPN goes UP. This script is for mapping network drives in theclients. Is possible to do that? any link with info?
Hi, 1) How can we upgrade the terminal service agent which was installed via batch file?2) We have 80 to 100 terminal services agent can we upgrade it via batch file if it possible what is the procedure of it. Thanks in advance!!
I have tunnel ipsec site to site vpn after enabling tunnel monitor tunnel status is down although phase 1 and phase 2 are up.Version 9.0.9-h1
Below is a link of a test implementation as I learn Minemeld. I have read the following documentation. Use Case Using Desmito, we would like to submit IOCs to the stdlib.localDB miner. Based off of investigations, the analyst will determine the TTL (age_out) policy for the IOC. The default policy should be configured for a 24 hour TTL.The test c...
Hello I have a PA 7050 Pan OS 8.0.16I have configured ntp server correctly and it show synched status and i configured correct time zone AMERICA/SAO PAULO tooBut the system show wrong time with +1 hour , similar to summer time or day lightNow a days the summer time was canceled in Brazil by president I dont undestand why ntp is synched and it...
We require our network to be PCI DSS compliant, and our most recent vulnerability scan showed a "DNS Server Cache Snooping Remote Information Disclosure" vulnerability on our PA-820 data interface (10.32.0.17) (report below)We are using model 820 in PANOS 8.1.15. All Dynamic contents are up to date.Threat log showing:1 15/12/2020 14:21 000232437...
The GlobalProtect data file, located on the Device tab > Dynamic Updates contains the OPSWAT file. We could not able to download it. We have scheduled download but still it is not working and other content update is working fine. Please find below logs:> less mp-log avdata.logMon Dec 13 07:30:03 +02 2020 : query string serialNumber=1604760...
Hey guys can anyone provide a little insight I set up action to allow an outbound rule for a group but I am getting an error of an "aged-out" and its coming from port 443. Any suggestions would be greatly appreciated
Hi, What are the drivers are used in terminal service agent? Following are the debug log and found error for drivers. 06/23/20 17:07:37[Info 331]: ------------Service is being started------------06/23/20 17:07:37[Info 406]: Load debug log level Info .06/23/20 17:07:37[Info 410]: Os version is 6.2.0.06/23/20 17:07:37[Info 342]: Query system port ...
Hi - Looking for best practices advice on WAN interface. Currently the WAN interface has a /26 with multiple IP addresses for incoming web servers translated to different subnets behind the PAN. Is there a default proxy arp working and is this the best practice or should the firewall have sub-interfaces? Thanks
hi all, we have a policy that clearly states FROM and TO objects and SMB_override (custom app, I presume, created earlier) as the application. The service is configured as Application-default. As per Monitor, it goes straight through to the deny rule ignoring our Allow rule. The application is correctly identified, the port is right. all looks g...
Hi everybody,Adding a bidirectionnal NAT rule for an ssl web server and the according security rule, connections from outside are dropped as "Incomplete". Traffic capture show that first SYN packet received is directly rejected by PA with a RST response. What does it mean ?Regards.
Hi, While installing the VM the terminal server agent was installed through the .bat file.Now our requirement has changed, I don't know how to uninstall the terminal server through the .bat file.While Install the Terminal server agent this error is coming pan terminal services agent process id 22908. Actually, we want verbose debug logs troubles...
We are trying to implement a NAC solution. The basics are that the NAC is connected to the switch stack and upon sensing a device connecting, it checks it for authentication against the NAC and if it fail it quarantines it into a specific VLAN. That part is working. The next step WOULD be that when the device goes to make a connection somewhere ...
Hello, I am getting the warning below after importing a certificate. Is there a link/KB I can check to fix this? Warning: certificate chain not correctly formed in certificate dc1pa.abcd.com.au Thanks in advance!
PavelK
on:
Throttling ingress bandwidth on a sub-interface
