About MohammedAsik

MohammedAsik · ‎04-16-2020

Hi Team In sec policy I have allowed for some users only RDP and SSH application. But these users are able to use WINSCP application because WINSCP application also using port 22. I want to block winscp application but allow ssh application. How can we achieve this ? Please help us. Regards Mohammed Asik

MohammedAsik · ‎04-03-2020

Hi @JoergSchuetter Do you have "Save User Credentials" enabled on the portal config (authentication)? Yes, I have enabled this option. After disabled GP asking credentials for every time to connect VPN.( In my lab). But its not working in one of our customer machine. After I tried to disabled the 3rd option "Clear Single-Sign-On Credentials on Logout" its working in customer machine. Now issue got resolved. Thanks a lot @JoergSchuetter

MohammedAsik · ‎04-02-2020

Hi Team My firewall PAN os is 8.1.9 and GP version is 5.0.5. Issue : Whenever I try to disconnect and connect the GP, its connected without asking credentials. If i manually give sign out from GP then only its asking for login credentials to connect GP. My requirement is Whenever I try to connect GP it should ask Login credentials and then connect..without Login credential it should not connect. Please help me out in this Regards Mohammed Asik

MohammedAsik · ‎03-11-2020

Hi Team Please let us know the total number of concurrent Users that can connect to Global protect vpn on the PA 3220 firewall. Regards Mohammed Asik

MohammedAsik · ‎03-03-2020

Hi Team We are facing issues with the newer version of global protect client version 5.0.8 on MAC machines. The client once installed, doesn’t ask for credentials & try’s to connect directly to the vpn. Please let us know if there is an know bug relate to such issues. Regards Mohammed Asik

MohammedAsik · ‎02-12-2020

@tomdevos Please configure the customize URL category for https://urlfiltering.paloaltonetworks.com/test-grayware and add it in URL filtering with action block. configure decryption policy with ssl forward proxy. Then this page will be block.I tested in my lab its working as expected. Regards Mohammed Asik

MohammedAsik · ‎02-12-2020

Hi Mayur Issue got resolved after added the IP on tunnel interface.and PBF policy.I followed the below KB article. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIeCAK Thanks for your support. regards Mohammed Asik

MohammedAsik · ‎02-11-2020

Hi Mayur Yes, still I am facing this issue

MohammedAsik · ‎02-07-2020

Hi Svelez Yes I have security rule to allow from inside to vpn zone. Please find the below security rule and static route for respective tunnel traffic 144.250.3.222/32 0.0.0.0 10 A S tunnel.10 { from inside; source 172.31.62.0/24; source-region none; to vpn; destination 144.250.3.222; destination-region none; user any; category any; application/service 0:any/any/any/any; action allow; icmp-unreachable: no terminal yes; }

MohammedAsik · ‎02-07-2020

Please find the below ss tunnel.10 interface

MohammedAsik · ‎02-07-2020

Mayur its a tunnel interface. thats why its showing next hop as 0.0.0.0. In traffic logs its taking the internet rule and its not pass through tunnel interface. its passing through internet interface Ethernet 1/1. Mohammed Asik

MohammedAsik · ‎02-07-2020

Please find the below routing and security policy details 144.250.3.222/32 0.0.0.0 10 A S tunnel.10 { from inside; source 172.31.62.0/24; source-region none; to vpn; destination 144.250.3.222; destination-region none; user any; category any; application/service 0:any/any/any/any; action allow; icmp-unreachable: no terminal yes; } Regards Mohammed Asik

MohammedAsik · ‎02-07-2020

HI Mayur I have configured proxy ID s also. but its not working regards Mohammed Asik

MohammedAsik · ‎02-07-2020

HI Team I have created S2S VPN tunnel between palo alto and cyberoam firewall. Tunnel is up but the traffic is not flow. Under Cyberoam firewall there is one server with public IP 144.21.X.X. From palo alto we need to reach the peer end public IP 144.21.X.X via the vpn tunnel. but whenever I tried to reach the peer end public IP 144.21.X.X its going via the internet rule instead of vpn rule. Our requirement is that traffic should go via the vpn tunnel to reach the IP 144.21.X.X I have configured the PBF policy but its not work.. Please help on this Regards Mohammed Asik

MohammedAsik · ‎11-29-2019

HI Team Our customer has one requirement that need to upload files in Wetransfer application but its also using the web-browsing application to upload the same file. If i allow the Web-browsing application in policy unnecessary websites are getting open. Requirement is specific user uploading files to wetransfer application at the same time they are not browse anything all should be blocked. Please help us to achieving this Thanks in advance Regards Mohammed Asik

Member Since	‎02-11-2019 01:00 AM
Date Last Visited	‎03-26-2021 12:09 AM
Posts	65
Total Likes Received	5

Online Status	Offline
Date Last Visited	‎03-26-2021 12:09 AM

About MohammedAsik

The virtual adapter was not set up correctly due to a delay. GlobalProtect will try again soon.

Re: critical : Chassis Master Alarm: Temperature on PA-5050

Block hash value

Re: critical : Chassis Master Alarm: Temperature on PA-5050

critical : Chassis Master Alarm: Temperature on PA-5050

Panorama backup query

Re: Traffic logs not shown the recent logs for particular source IP

Re: Traffic logs not shown the recent logs for particular source IP

Re: Traffic logs not shown the recent logs for particular source IP

Traffic logs not shown the recent logs for particular source IP

Global protect disconnect popup message

The virtual adapter was not set up correctly due to a delay. GlobalProtect will try again soon.

DNS resolution is not happening after connected the Global protect

Re: SSL test pages of urlfiltering.paloaltonetworks.com not blocked

Troubleshoot Performance Related to GlobalProtect

Re: How to apply QOS on the Incoming traffic from Tunnel interface ?

Re: GP login without asking credentials

Re: Total number of concurrent Users that can connect to Global protect vpn on the PA 3220 firewall

Re: Block Wetransfer Upload

Need to block WINSCP application but want to allow ssh

Re: GP login without asking credentials

GP login without asking credentials

Total number of concurrent Users that can connect to Global protect vpn on the PA 3220 firewall

Issue with global protect VPN 5.0.8 on MAC machines

Re: SSL test pages of urlfiltering.paloaltonetworks.com not blocked

Re: unable to reach peer end public IP via vpn tunnel

Re: unable to reach peer end public IP via vpn tunnel

Re: unable to reach peer end public IP via vpn tunnel

Re: unable to reach peer end public IP via vpn tunnel

Re: unable to reach peer end public IP via vpn tunnel

Re: unable to reach peer end public IP via vpn tunnel

Re: unable to reach peer end public IP via vpn tunnel

unable to reach peer end public IP via vpn tunnel

Need to allow upload files in wetransfer without getting open unnecessary websites

Unlock your full community experience!

About MohammedAsik