About KiCheon.Lee

KiCheon.Lee · ‎08-06-2013

Thanks, VinceM. Where is ignore list menu on agentless? And Is it possible that ignore 'aaa' account is put into ignore list?? I know to configure only ip address.

KiCheon.Lee · ‎08-06-2013

Hello Each users have two and four accounts in their office. All account are authenticated by Active-Directoy. Each users use several accounts on one PC at the same time. For example, Mr, A has 'AAA' account and 'aaa' account. He uses 'AAA' account when connect Internet. He uses 'aaa' account when connect office E-Mail. He uses two accounts on one PC(one IP) at the same time. I know that one IP has only one User-ID in PaloAlto FW. My customer wants to enforce security policy about only 'AAA' account. But PA doesn't enforce security policy when Mr, A use 'aaa' account. Someone help me! Are there good ideas resolved?

KiCheon.Lee · ‎08-06-2013

Thanks, kprakash. Are there both ip-user-mapping info on DP and ip-user-mapping-mp info on MP when make user-id with user agent??

KiCheon.Lee · ‎08-05-2013

Hello I have a questions about agentless user-id in panos-5.0. I know that cache time of user-ip mapping information is 45 minutes(default) on agent and cache time is 1 hour(default) on FW in PANOS-4.1. Are these time values same in PANOS-5.0? If it is right, Do user ip mapping in MP run instead of agent role in PANOS-4.1? Are MP cache times 45minutes(default)? and Do user ip mapping in DP run instead of FW role in PANOS-4.1? Are DP cache times also 1 hour(default)? Thanks

KiCheon.Lee · ‎08-01-2013

I use client certificates. This certificates are issued by internal CA.

KiCheon.Lee · ‎08-01-2013

Thank you for your answer, Nadir and kprakash. I have more question. I authorize to access and control only A device group to ABC user. I see that he control Policies and Objects on menu for only A device group. But He can look at traffic logs with other device groups. I don't want that he look at traffic logs of other device groups. Only traffic logs of A device group. Can I make it is possible?

KiCheon.Lee · ‎08-01-2013

Thank you for your answer, achitwadgi and dreputi. FWs send url logs by threat information severity of syslog. (The value of threat subtype field is url) Also FWs send file logs by threat low severity of syslog. (The value of threat subtype field is file) Low severity include alert , allow , forward and deny actions on file log. Wildfire-upload-skip action is information severity. Are they right?

KiCheon.Lee · ‎07-28-2013

Hello There are Device-A , Device-B and Device-C FWs. All FWs forward all logs to Panorama. I want to look ACC included only Device-A and Device-B in Panorama. Is it possible? Thanks

KiCheon.Lee · ‎07-24-2013

Hello, I know there are not log type of url & data filtering on syslog server profile. But my customer want to receive two logs to ESM system by syslog. Are there ways? Please let me know it if there are. And I have a question. Panorama is received this logs(url , data) from FW. Why is it able to receive? Thanks.

KiCheon.Lee · ‎06-20-2013

I had imported intermediate certificate for client certificate to FW. My customer sent only this certificate issuer by private Window CA. Do I need root certificate? Then Will I have to configure root certificate in portal config / Client configuration / Trust Root CA????

KiCheon.Lee · ‎06-20-2013

Hello VinceM, Thank you for your information. I have installed to choose client certificate in portal config / Client configuration / Trust Root CA. But result is same. I don't connect GP with same error message. I guess that FW does not read common name in certificate.

KiCheon.Lee · ‎06-20-2013

Hello gregory.screve1, Thank you for your help. I had seen this document your recommend. I have modified certificate profile in portal configuration. But I don't still connect GP with same error message. Please let me know other resolved way.

KiCheon.Lee · ‎06-19-2013

Hello I had tested to connect global protect with client cert successful in my lab.(PANOS-5.0.x) I am installing global protect on my custom device.(PANOS-5.0.x) But I don't connect with 'client cert invalid' message. I had installed the following in my lab at old days. 1. self generated certificate. 2. subject > common-name. profile name is 'test' 3. Portal configuration (authentication profile : local DB , client certificate : none , certificate profile : none) 4. Gateway configuration (authentication profile : none , certificate profile : 'test') 5. import certificate into my laptop. 6. connecting GP -> portal auth localdb(id/pw) successful -> gateway auth client cert(username : uquest) successful I am installing the following in my custom device. 1. FW is imported certificate issuer by window CA server. subject : /C=KR/ST=Seoul/O=paloalto/OU=paloalto/CN=pa.paloalto.co.kr issuer : /DC=local/DC=paloalto/CN=paloalto-CA 2. certificate profile : name 'test01' username field - subject - common name domain : pa.paloalto.co.kr 3. Portal configuration (authentication profile local DB , client certificate : none , certificate profile : none) 4. Gateway configuration (authentication profile : none , certificate profile : 'test01') 5. import certificate into my laptop. 6. connecting GP -> portal auth localdb(id/pw) successful -> gateway auth client cert(username : none) fail. Error message is client cert invalid. I don't know what missed configuration and problem. Please let me know resolved way. Thanks.

KiCheon.Lee · ‎06-19-2013

I had imported only intermediate certificate. I have seen this error message. Will I have to import root and intermediate certificates?? Do I need other something??

KiCheon.Lee · ‎05-30-2013

Hello all, I don't connect GP. GP client display error message. It is 'An error occured int the secure channel'. I use Window XP service pack 3. Only this desktop doesn't connect GP. Other desktop(window 7 , same account) connect. Please let me know resolved way. lo Thanks.

KiCheon.Lee · ‎05-29-2013

I have looked indexgen.log. I have found below logs in indexgen.log May 29 04:05:01 Error: pan_indexerv2_rowset_create(pan_logdb_indexer_v2.c:1275): Something wrong in index file /opt/pancfg/mgmt/logdb/appstatdb/1/20130528/pan.0000000000.log.name.idx with field name at index 2: 13833 - 10021 May 29 04:05:01 Error: _process_buffers(pan_logdb_indexer_v2.c:1604): rowset derivation from idxbuf failed May 29 04:05:01 Error: main(pan_logdb_indexer.c:519): pan_logdb_indexer_doindex() failed Are this logs normal?? Thanks

KiCheon.Lee · ‎05-29-2013

Thanks a million, zarina. I will look indexgen.log.

KiCheon.Lee · ‎05-29-2013

Hello My customer use M-100 appliance. M-100 CPU is not high. But searching traffic logs are very slow. M-100 OS is 5.0.2 How way do i check for logDB index? I thing that logDB index has some problem.

KiCheon.Lee · ‎05-28-2013

Hello I installed about virtual-wire link aggregation. (image1.png & image2.png) all members of 'ae1' are ethernet 1/3 , 1/5 , 1/7. all members of 'ae2' are ethernet 1/4 , 1/6 , 1/8. all members of 'ae2' was disconnected when I had removed ethernet 1/3. (image3.png) They was connected after 5 seconds.(image4.png) The device is enabled link state pass through. Are this situation and result right?? Thanks

KiCheon.Lee · ‎05-26-2013

Hello ncampagna, I have helpful assistance by your comment. Thanks a million. I have more question. What available number of same source port does FW have at different destination address??? Thanks.

KiCheon.Lee · ‎05-26-2013

Hello, I have questions about WF-500. Can there be alone WF-500 without FW? I read WF-500 Doc that WF-500 doesn't provide wildfire web portal for detail report. It sends result(malware or benign) to only FW wildfire log. How way does user check log without FW? Does WF-500 have connected UI interface? Thanks.

KiCheon.Lee · ‎05-12-2013

Hello emr, You assist my question, again. Thank you for always help me. I have a question, more. If I install all side (left and right) in service route configuration. Does the device process left side rather than right side?? or Does it process right side rather than left side??? Regards,

KiCheon.Lee · ‎05-12-2013

Hello all, I use kerberos auth for Global Protect on PANOS-4.1.x. Remote users fail auth for GP connection that it appear 'invalid username'. So I want to collect PCAP on kerberos server and PA device. I know that PA use mgmt interface for communicated kerberos. I want to change interface from mgmt for collected PCAP. What does it change in 'service route configuration'??? Thank

KiCheon.Lee · ‎05-05-2013

Hello I know vulnerability 30844 signature when date update last. And I know it what version is last. I can find AV signature from threat vault page in support site. But I don't find to check it in CLI , GUI , Threat Vault etc. Thanks

KiCheon.Lee · ‎05-02-2013

Hi emr, I had said your assistance to my customer. I have received email form him that this problem is resolved and he feel satisfaction. Thank you very much for your assistance.

KiCheon.Lee · ‎05-01-2013

Thanks, emr. Where is control panel > java menu?? I don't find this menu? Is there on Browser Menu or PaloAlto Menu??? Thanks, rkalugdan. I am so sorry. I don't understand your comment. I think that your comment doesn't relate my question. Would you say more detail?? Have a happy day.

KiCheon.Lee · ‎04-28-2013

Hello mikand Your say mean is I may use restart of mgmt plane without affected new session if I don't use security policies without userid and/or url filtering. Is it right?? I guess this reason because it needs ip-user-mapping info and url cache in mgmt if is is right.Is this reason right?? Thanks

KiCheon.Lee · ‎04-28-2013

Hello My customer has installed 'NetConnect' on Window 7 32bits. It is failure with as below error message. "Unable to extract installer Setup.msi Error: null" Why does it display?? And How way does it resolve?? Thanks

KiCheon.Lee · ‎04-23-2013

Thank you very much, Ameya. I am helpful for you answer.

KiCheon.Lee · ‎04-23-2013

Wow, Thanks a million for your detail answer. Must not between PA devices be configured proxy-ids? And must PA device be configured proxy-id when connect policy based vpn such as Cisco , Juniper , CHKPOINT by ipsec-vpn???? Is it right???

Date Registered	‎04-29-2011 08:30 AM
Date Last Visited	‎11-01-2019 12:58 AM
Total Messages Posted	202
Total Likes Received	14

Online Status	Offline
Date Last Visited	‎11-01-2019 12:58 AM

Strata

Prisma

Cortex

About KiCheon.Lee