About cpainchaud

do you have stats of logs/second on your Domain Controller ?   can you describe its hardware ? ... View more

IMO, pressure your sales to get good deal for a  3000 series replacement.   ... View more

Eventually yes,    Number of logs per seconds (not just logon events but all events) and resource constraints (CPU+RAM) on your domain controller may explain this.    I suppose you are using FW embdded agent, Windows agent works differently and shall put less pressure on your domain controller. ... View more

Pre-logon means computer can authenticate. Computer needs to have a SSL certificate pre-installed to make this happen and yes it's compatible with user token/radius logon afterward. ... View more

did you replace key=YOUR_API_KEY_HERE  with your API key ? ... View more

it used to work with previous versions in my lab I am pretty sure with Chrome. Might be a bug on their side as their doc says it should work. May be you could open a bug on chromium project ? ... View more

https://wiki.mozilla.org/SecurityEngineering/Public_Key_Pinning#Implementation_status   How to use pinning Starting with FF 32, it's on by default, so you don't have to do anything. The pinning level is enforced by a pref, security.cert_pinning.enforcement_level 0. Pinning disabled 1. Allow User MITM (pinning not enforced if the trust anchor is a user inserted CA, default) 2. Strict. Pinning is always enforced. 3. Enforce test mode.   What mode is enabled in yours ? ... View more

it says 'starting firefox 32' what version do you have and in which store did you install it ? ... View more

keep tunnel in Partners. ... View more

You may find the following to fit your needs with a single CLI command :   php rules-edit.php in=api://1.2.3.4 actions=display/ExportToExcel:test.xls location=any   More doc on : https://live.paloaltonetworks.com/t5/SDK-API-Articles/rules-edit-php-to-manage-edit-export-rules-from-CLI/ta-p/53321 ... View more

https://developer.mozilla.org/en-US/docs/Web/Security/Public_Key_Pinning   Firefox (and Chrome) disable Pin Validation for Pinned Hosts whose validated certificate chain terminates at a user-defined trust anchor (rather than a built-in trust anchor). ... View more

it should work with Chrome is your CA is deployed in Trust Enterprise store (not the classic & standard public CA store) ... View more

the question is more like 'does it keep progressing?' if yes then you have a memory leak issue and should open a ticket. ... View more

bypassing content inspection on this one is not an issue if there is nothing to protect anyway for Siebel.   I advice you to open a TAC case with some packet captures. ... View more

problem may not come from this connection but another one (think about FTP control vs data connection) , you may experience slow data connection start because control session is acting weird or distrutped. As an example, may be the client is trying to resolve server name from dns, but dns is blocked on primary server so you take 3 seconds delay until secondary DNS server is queried and answers   Do a PCAP to prove that firewall delays or not the packets of the connections that devs say they have a problem with.    If PAN delays packet, open a TAC case.    if PAN doesnt delay packets, tell devs to provide better troubleshooting because whatever the problem is (PANOS or other) they are not pointing which flow is not working. ... View more