General Topics

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Resolved! Pre-Logon GP VPN

Ive read a number of guides, but for the life of me i cannot get pre-logon working. Is there an idiots guide to the required certs i need? Our clients already have a machine cert which we use for wifi authentication

Secure Renegotiation IS NOT supported

PANOS: 8.1.0

Inbound decryption SERVER-INITIATED Secure Renegotiation IS NOT supported.

Disable decription SERVER-INITIATED Secure Renegotiation IS supported

Thanks

Resolved! Application and Threat Update ----Decoder

need to confirm one thing below

with application and threat updates when we see the decoder as DNS then we do need to check all the vulnerability and

anti spyware in order to make what traffic is linked to DNS?

In other words when i see the deco

...

Globalprotect disconnects

Weird one here,

I have many remote users, all over, experiencing no issues. But... I have one user which when the user connects, he successfully connects but as quick as he auth's, he gets disconnected. Reason "client logged out". In which he does no

...

Resolved! Is PANOS 8.1.3 really functionnal on PA-3250 ?

Hi all,

We migrated 2 weeks ago from a PA-3020 to a PA-3250.

We upgrated the PA-3020 from PanOS 7.1.19 to 8.1.3 and then we exported the configuration and then imported it into the PA-3250 (that was already in PANOS 8.1.3)

Since this migration we face

...

Experiencing issue with MineMeld fresh installs

Hi,

Have anyone tried a fresh install of MineMeld recently? I'm getting issues with minemeld engine on Ubuntu 14 (using apt repo) and 16 (ansible). What I did was doing an apt-get update && apt-get upgrade on both version:

From the console:

minemeld-

...

Resolved! threat logs - type vulnerability and spyware - Action - reset both and drop

Under threats logs i see type as :

type vulnerability action - reset both-----------sev is high

does this mean that if it is DNS query traffic this will time out the traffic?

Threat ID here is 54122

type spyware action is drop --------------sev

...

Switching GP from User (Always On) to Pre Logon

I’m looking at switching GP from User (Always On) to Pre-Logon (always On).

Current setup is one firewall serving as both the portal and gateway. I’m doing both username/password with client user certificates for multiple authentication factors, as th...

Local User Database :: Password Change :: VPN Global Protect Client

Hello,

Is the a way to force the Local User change your password at the first login in the Global Protect Client?

Today I create your respective username and password but some users have been complain that I know your local respective password and th

...

Resolved! Disk-Space issue and role

I have found that disk-space is getting higher which is mounted on /.

I just wonder the role of each filesystem.

I know /dev/md5 is mounted on /opt/pancfg, /dev/mp6/ is on /opt/panrepo and so on.

What is the role of / and what kind of files are there, a

...

Resolved! Recent APP update and Long live DNS timeout with Proof Point

Hi Everyone,

Did someone experience issue with APP and threat update on 2nd of this month.

We were having DNS timeout issue with proofpoint devices.

Fix was reverting back to old app and threat version.

Regards

Mike

PA-220 Configure E1/2-5 as basic Switch Ports?

Hello.

This may be a much simpler task that it seems.

What I am trying to accomplish - in a SonicWALL device - is called Portshields.

The management port is currently configured on my trusted LAN.

How do I assign ports to be basic L2 ports on the same t

...

Logs during upgrade

If i do a upgrade on a firewall from panorama (maybe api is the same?), is there anyway of gather the log from the upgrade or follow the progress from the cli?

Just in case the upgrade failes i guess it would be nice to be able to read the logs afte

...

Resolved! Attacker and victim in Threat logs

i am checking the threat logs

direction is server to client

instead of source and destination it shows attacker and victim.

how can i confirm source and destination??

by ingress or egress interface or from zone to zone?

Regards

Mike

How to find Zone for an IP address in V Wire mode

Hi Experts,

Could you please suggest how to find Relevant Zone for an IP addresses in V Wire mode.

Because in V Wire type , we don't configure IP address for that Interface, nor routing table is calcuated .Not sure, how to find the relevant Source/

...

General Topics

Discussions

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free