This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences

About santonic

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
santonic
‎12-02-2024
since ‎01-26-2011
L6 Presenter
User Activity
User Profile
Latest posts by santonic
View All
User Badges
Community Statistics
Member Since ‎01-26-2011 05:56 AM
Date Last Visited ‎12-02-2024 12:54 PM
Posts 672
Total Likes Received 191

Re: Palo Alto Networks' New Advanced URL Filtering Security Subscription

by in Community Blogs
‎12-02-2021 02:16 AM
‎12-02-2021 02:16 AM
Does this licence already include standard URL Filtering licence? Or you need to purchase both?  ... View more

Re: RADIUS And Open LDAP Integration.

by in General Topics
‎08-17-2021 11:47 PM
1 Kudo
‎08-17-2021 11:47 PM
1 Kudo
Haha, true that. Tho I've seen different variatons to derive username from name and surname 😉  But I assume in OP's case it's just a radius proxy for MFA which uses LDAP as source of identities anyway. ... View more

Re: RADIUS And Open LDAP Integration.

by in General Topics
‎08-17-2021 01:57 AM
1 Kudo
‎08-17-2021 01:57 AM
1 Kudo
@Mick_Ball  Was thinking about this once, but never tried it. Can you confirm this works? Also usernames between Open LDAP and RADIUS will have to match. ... View more

Re: Network Packet Broker

by in General Topics
‎08-16-2021 03:25 AM
1 Kudo
‎08-16-2021 03:25 AM
1 Kudo
Yeah, probably. But with all the PA features for writing policy rules (app-id, user-id, zones, rule based profiles...) the mirroring options here would be far superior to any switch.    ... View more

Re: RADIUS And Open LDAP Integration.

by in General Topics
‎08-16-2021 03:12 AM
‎08-16-2021 03:12 AM
As far as I know PA can use RADIUS user groups only in authentication profiles (checking if user belongs to certain group after succesful authentication). For security (or any other) policies PA can only use user groups obtained from LDAP servers. So consider switching GP authentication to LDAP. ... View more

Re: Network Packet Broker

by in General Topics
‎08-16-2021 12:40 AM
‎08-16-2021 12:40 AM
Yeah, that is my understanding as well. But I am a bit surprised it's not possible as it would be the easier option to implement I guess.  ... View more

Network Packet Broker

by in General Topics
‎08-13-2021 03:05 AM
‎08-13-2021 03:05 AM
Can network packet broker feature (in PAN-OS 10.1) be used only to mirror some traffic and not expect any return traffic? Like port mirror on switch.   ... View more

Re: Globalprotect 5.2.5 popup message

by in GlobalProtect Discussions
‎05-18-2021 05:41 AM
1 Kudo
‎05-18-2021 05:41 AM
1 Kudo
The solution from Reddit was just for cases, when gateway was on private (loopback) address and NAT was only configured for TCP 443 and not UDP 4501 (for ESP over UDP). And it wasn't U-turn NAT.   I guess there remains an open issue that option which should disable notification about fallback from IPSEC to SSL doesn't disable it even in version 5.2.6? And I believe this option was introduced only in 5.2.5?   The main question is; have you noticed that clients previously connecting over IPSEC now connect only over SSL? ... View more

PRe: Session End reason & Application Status

by in General Topics
‎10-16-2020 04:10 AM
1 Kudo
‎10-16-2020 04:10 AM
1 Kudo
@Diyar.m  Ping (ICMP) will survive asymmetric routing, but TCP won't. ... View more

Re: several IKE Crypto Profiles on the same interface for SITE-to-SITE VPN

by in General Topics
‎07-19-2020 11:07 PM
‎07-19-2020 11:07 PM
Yes, that sounds like a step backwards in 9.1. What is the logic behind this? ... View more

Re: SD-WAN internet link (DIA) monitoring

by in General Topics
‎05-04-2020 01:31 AM
‎05-04-2020 01:31 AM
I agree with @Josef.Honc and it's a very good question. I am also curious if PA can measure quality of DIA links.  ... View more

Re: Palo Alto and Menlo Integration

by in General Topics
‎03-05-2020 03:05 AM
‎03-05-2020 03:05 AM
With PBF you could re-route traffic to some destination based on various criteria. That destination has to be a device on connected network. So I don't think that will work for Menlo.   PA is not a proxy, so the integration you have in mind won't work. But I am pretty sure PA will do a great job securing your web traffic without any help. ... View more

Re: SD-WAN - routing with variables

by in General Topics
‎03-03-2020 11:36 PM
‎03-03-2020 11:36 PM
I am following the admin guide: https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/sd-wan/1-0/sd-wan-admin/sd-wan-admin.pdf   At first I'm doing it without BGP and on page 58 you can either use Panorama template variables or define static routes directly on FW. And the variables you make you use in destination field which must be of type IP address.     ... View more

SD-WAN - routing with variables

by in General Topics
‎03-03-2020 05:48 AM
‎03-03-2020 05:48 AM
Anyone been trying to setup SD-WAN routing with template variables? Surely that page in admin guide is completely wrong? Variables should be of type IP address.  ... View more

Re: TAP in environments with asynchronous routing

by in General Topics
‎01-16-2020 11:20 PM
‎01-16-2020 11:20 PM
The scenario is to introduce PA capabilities to the customer (SLR) so we want to put it in TAP mode on north/south traffic. ... View more
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎12-02-2024 12:54 PM
Likes Given To
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks