General Topics
cancel
Showing results for 
Search instead for 
Did you mean: 
General Topics

Forum Posts

New LIVE AMA event, LIVEcommunity Team Roundtable!

If you are curious to know more about how the LIVEcommunity works, have a chance to chat with community team members, or ask a non-technical question? Now’s your chance! The floor is open for all you burning questions now through June 24. The LIVEcom...

ama-graphic.png
jdelio by Community Team Member
  • 210 Views
  • 0 replies
  • 4 Likes

Resolved! GlobalProtect, Working from Home, Prisma Access and Covid-19

To all, Just wanted to post a message about the Hot Topic right now, which is Covid-19. With all of this going around, everybody's health and safely is the utmost concern. Keeping your hands clean, washing your hands (A LOT), using hand sanitizers, a...

jdelio by Community Team Member
  • 18440 Views
  • 41 replies
  • 32 Likes

Clientless VPN not resolving URL domain names

I recently set up the Clientless VPN feature in PAN-OS 8.0 and I'm having problems with the domain names for the Clientless Apps not resolving. I added a DNS Proxy in the Clientless VPN section of the GlobalProtect Portal that is associated to the GP...

jwolach by L4 Transporter
  • 2220 Views
  • 4 replies
  • 0 Likes

gamenet.ru false-positive

Hello,​I represent GameNet technical support service (www.gamenet.ru). We are designed an application QGNA for our customers (over 10 000 000 people) for game launch.​Direct link for test on VirusTotal:https://www.virustotal.com/ru/file/6f6f19e994c1c...

Research paper shows vulnerabilities with SSL interception

On Feb 2017, some universities, Mozilla, Cloudflare, and Google released this paper on corporate and desktop HTTPS interception. First they figured out how to identify when someone connects to a web server through an SSL interception appliance. Then ...

Maxstr by L3 Networker
  • 1312 Views
  • 5 replies
  • 0 Likes

PA 7.0, GP and RSA-ID double authentication

Hi, There is a deployment with RSA-ID as OTP and GP as VPN client (3.1 or 3.0). PAN-OS version 7.0.14.After the recent upgrade from 6.x to 7.x an issue showed up - when authenticating from GP - login information is asked twice.This seems like a known...

nikoo by L3 Networker
  • 1108 Views
  • 3 replies
  • 0 Likes

Resolved! Can I enforce security based in AD Computer groups yet?

I see history here indicating the user-id agent has been blind to computer names when the group membership is added to user IDs. The CLI DOES show the computer name as a userID (with a post-pended $) and the groups are mapped correctly to the compute...

JWileyR by L1 Bithead
  • 934 Views
  • 3 replies
  • 0 Likes

Resolved! New To Palo Alto Firewalls

Hi,I have Frontier FIOS and am currently using an ASA for my Internet router but want to use a PA-200 with a Cisco 891F behind it. The design looks like this: ISP(DHCP)----(e1/1)-PA-200-(e1/2)---891F (5 subnets) I set e1/1 untrust w/DHCP from the ISP...

Gaming PCs and Consoles with DIPP NAT

Hi all, I've been researching this for a while now and I've also opened a case on the issue. Basically we just moved off of our Cisco ASA platform and on to our Palo Alto and I've run into a snag with gaming devices. We're a university with quite a f...

jsalmans by L4 Transporter
  • 2689 Views
  • 16 replies
  • 0 Likes

Resolved! HA scenario questions?

Hi folks, I am learning (self training at this point) about my company's two Palo Alto 3020 devices in our datacenter. We are currently only using one device for our routing, firewall, etc. I am tasked with eventually configuring the second one as HA...

PA_HA.jpg
OMatlock by L4 Transporter
  • 733 Views
  • 3 replies
  • 0 Likes

Trusted MFA Gateways

What to type? What format? The doc doesn't say... I'm testing MFA in non-http traffic, and have enabled "Inbound Authentication Prompts from MFA Gateway" But what to type here: In Trusted MFA Gateways, specify the list of authentication gateways a Gl...

gtomte by L3 Networker
  • 938 Views
  • 1 replies
  • 0 Likes

Resolved! User-ID. Is WMI really needed?

Hi all I have an end-customer who is using ServerMonitoring and User-Id agent at the same time. His AD has been audited by Microsoft and discovered that their performance is affected by thew WMI probbing. My questions is. If they remove all ServerMon...

SOC_CSG by L4 Transporter
  • 1856 Views
  • 4 replies
  • 1 Likes