GlobalProtect LDAP Authentication Fails
I have succesfully set up local login for GP but struggling to set up LDAP authentication. The CLI test says that its succesfull, but it fails whne using GP Any tips please?
I have succesfully set up local login for GP but struggling to set up LDAP authentication. The CLI test says that its succesfull, but it fails whne using GP Any tips please?
Hi all, I have a question regarding URL filtering. I set up URL filtering in Security Profiles to "Alert" for Google Tag Manager. Test and work with the browser access to "https://www.googletagmanager.com/". When I use Wireshark to capture packets, why do I see only packets ssl negotiations "clent hello", not responsed "server hello". However, ...
We are using DHCP server relay in Palo Alto provide IPs to network.We have faced issues aboutpalo alto stopped processing DHCP relayIt was not shown in system logsIt was shown in dhcpd.logs ==Warning: pan_dhcpd_cfgagent_initial_config_callback(pan_dhcpd_cfg.c:1902): pan_dhcpd_cfgagent_initial_config() failed2018-05-13 14:44:35.441 +0200 Sending...
I've been trying to setup this scenario. But I keep getting subject as username on GP portal. Is there any trick? Because configuration is pretty simple.
Since we do not have any spare Palo Alto FW's and our is production I must ask before doing something wrong... I deleted object group (that included 2 HA FW's), created new one with the same 2 FW's comited to Panorama, but now the rules and objects are deleted in Panorama, but on FW's there are still those ruls. Can I safely revert 4 commits bac...
Hi, I have a new vm on U16.04 and have installed the latest minemeld using the minemeld-ansible. Once all setup and running it was fine but about 20 mins later where I did nothing as I left my desk I came back to "ERROR RETRIEVING MINEMELD METRICS: INTERNAL SERVER ERROR" Alerts on the screen 3 times. I have tried restarting the service ...
Hello Community, the logs on my Minemeld shows the below error for all that IPs that catch, could you please advice how to get ride of this problem? Thanks in advance
We've had Global Protect in production for a while now, but it has just recently been brought to my attention that we are having a lot of users locking their accounts out.The GP client prompts them for their AD username / password. Maybe they fat-finger their password or whatever. The GP client never gives them any indication of any issue, other...
Im installing a single Palo at present with the intent of adding a standby unit in the near future. My question is regarding the interface addresses on the standby unit. What do i need to configure on the standby unit in regards to IP addressing apart from MGMT and HA interfaces? I cant see an option for standby IP addresses (like Cisco), so the...
Is there any way to provide reporting for GlobalProtect remote access VPN. Like for example I want a report of users who have connected in the past week, etc. How do i generate those reports?
I have searched high and low for this and found a few articles regarding IKE configuration and nothing seems to fix it. PAN 3020 v7.0.5. IKE 2 VPN to Azure. The VPN works but around every 50 mintues the tunnel drops out for a few minutes then re-establishes. I have tried various different IKE and IPsec settings as per advice from Palo Alto artic...
Hey!I'm using curl and the xml api to automtically backup the config of my PA-3020:https://live.paloaltonetworks.com/t5/Management-Articles/How-To-Backup-of-Config-Files-Periodically-without-Panorama/ta-p/77312 However, the content of that file looks completely different compared to a manual backup. device -> setup -> operations -> save...
We encountered with the problem of Skype for Business application , it needs to saythat all another applications are working well, but after migration from Cisco ASA toPA-820 we saw only tcp-rst-from-server message from remote server to local server forSkype or for clients too without of local server... no matter what.. it's verystrange behav...
Hi, In minemeld logs from the nodes, taking AF-Ransomware node as an example, I have 2 questions regarding the confidence, thanks! 1. does the confidence level come from the source feed? 2. can customers change this confidence level?
Compare to Cisco, it was mention that the bytes size is 1,204 bytes on the datasheet. How about the Palo Alto? is it 1,204 bytes or 512 bytes?
| Subject | Likes |
|---|---|
| 5 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
| User | Likes Count |
|---|---|
| 8 | |
| 6 | |
| 6 | |
| 4 | |
| 2 |

