Cisco WLC integration problem with PA.

I have Cisco WLC 5508 , kiwi syslogd and PA.I can see snmp traps in Syslogd but only username is visible , ip address of the client is missing.Can anybody help how to parse it in Palo alto Firewall.

Regards,

IPSec VPN with cert authentication: RSA_verify failed

Hello community!

Created a VPN Palo Alto - Cisco Asa with certificates for Ikev2 gateway authentication.

Cannot establish the VPN. Did a debug and get the following error when the palo alto is trying to validate the ASA´s certificate

[PERR]: RSA_veri

session time-out need some understanding

We hare seeing some oracle session being aged-out. When i checked session info tim-out it says 120sec. But the application time-out itself is for 14400 sec . Where does this value of 120 sec come from.

mtr

Hi,

from the above output the second hope is the pa firewall , the loss is 98.2% , What does it mean ,
I dont have traffic shaping in firewall 
 
Thanks

GP RDP and User-id

Hi

I recently upgrade to GP client 5.x.

now when i login into my laptop say 10.10.10.10 as alex.samad GP logs me in as well and the PA's know 10.10.10.10 as alex.samad

when i rdp to 20.20.20.20. and login as peter pan.. the PA assign peter pan to 10.

User-ID LDAP syntax in rule

In the group mapping UserID template, we use LDAP syntax (CN=...., OU=...), but in rules, I have always seen Source User expressed  in lanman syntax, Domain\User or ...\Group.  Is it possible to use the LDAP syntax in the rule as well, and is there a

What is the requirements to take the ACE examination

I want to take the ACE examination and I had completed the Firewall 8.1 Essentials: Configuration and Management (EDU-110).

But still i cant take the exam. 

ignore users for IP subnet

Hi,

with the risk that this was already discussed, I have a question regarding ignore users with User-ID.

I configured User-ID for our clients, also for the IT department.
In the IT, we also using admin accounts. So when I started a programm in admin

Upgrade Logs

I am trying to capture all the logs related to any upgrade and downgrade. I understand the firewalls download the firmware from  updates.paloaltonetworks.com. This then points to the nearest PA Server to download the code from the CND infrastructure.