This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences

About jleung

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
jleung
‎08-18-2015
since ‎01-07-2010
L4 Transporter
User Activity
User Profile
Latest posts by jleung
View All
My Liked Posts
View All
User Badges
Community Statistics
Member Since ‎01-07-2010 04:15 PM
Date Last Visited ‎08-18-2015 09:06 AM
Posts 174
Total Likes Received 53

Re: SSL VPN over Dial-Up Speeds

by in General Topics
‎10-09-2011 04:20 AM
1 Kudo
‎10-09-2011 04:20 AM
1 Kudo
Hi, As Kelly mentioned, it is very likely a MTU issue. Please go to the tunnel interface and change the MTU (default is 1500). Regards, Jones ... View more

Re: Newbee Needs Help

by in General Topics
‎10-09-2011 04:15 AM
‎10-09-2011 04:15 AM
Hi, For any incoming connection, the NAT policy shouldbe like this: Original SRC Zone: untrust, src IP: any Dst Zone: untrust, dst IP: public IP of OWA Translated: Src IP: any any Dst IP: private IP, Static IP For security: Src Zone: Untrust, src IP: any Dst Zone: DMZ, dst IP: public IP Application: SSL (as OWA is encrypted) Regards, Jones ... View more

Re: Blacklist threat attackers?

by in General Topics
‎10-09-2011 04:04 AM
‎10-09-2011 04:04 AM
Hi, Actually for brute force attack you can choose blockIP as the action after several failed attempts. You can setup the no.opf failed attempts within what interval that should trigger the block IP by clicking on the icon next to the vul sig name under object-> vulnerability. Regards, Jones ... View more

Re: FTP question

by in General Topics
‎09-27-2011 09:22 AM
‎09-27-2011 09:22 AM
Hi, May I know how you apply your policy for SSH traffic to your server? Have you tried to allow SSH traffic to and from your SFTP server? Regards, Jones ... View more

Re: Appstore and itunes on iOS

by in General Topics
‎09-23-2011 08:35 PM
1 Kudo
‎09-23-2011 08:35 PM
1 Kudo
Hi, It is because itunes actually depends on another app- web-browsing. Which means for the first packet it will be classified as web browsing and you need to allow that packet and cannot block it by URL filtering. So you can create a custom category and put itunes.com in the category to allow it apart from just blocking online category only. Regards, Jones ... View more

Re: Reports - Best way to see top URLs visited?

by in General Topics
‎09-22-2011 11:45 PM
‎09-22-2011 11:45 PM
Hi, Now some of our third party partners reporting tool can actually create reports based on the URL domain portion of the URL logs. I have attached an example from Sawmill. We understood the need and I will recommend you guys to escalate your needs to our local sales and SE team, in order to make sure that we will be able to well documented your needs in details with justification. Regards, Jones ... View more

Re: Web filtering only license/Idle time outs.

by in General Topics
‎09-22-2011 11:36 PM
‎09-22-2011 11:36 PM
Thanks Rick. You have two options to change the idle timeout. Before changing the value you can run "show session info" to understand the current value. 1. Change the global TCP and UDP timeout by CLI: Configure set deviceconfig setting session timeout-tcp/timeout-udp <value> commit 2. Change the per-application value. You need to know what applications we have identified the traffic as through the traffic log before applying the change: go to object -> application -> click on the application and change the timeout value commit Regards, Jones ... View more

Re: SSL VPN Security

by in General Topics
‎09-22-2011 11:22 PM
1 Kudo
‎09-22-2011 11:22 PM
1 Kudo
Hi, You have two ways to apply secuirty on SSLVPN traffic in your scenario: 1. move the tunnel interface to a dedicated SSLVPN zone, so that all traffic from SSLVPN zone to other zone must be explicitly allowed. And you can apply control based on source users or group. 2. keep your current setting but creae policy based on the source user or group that you have given to the vendor. you can also apply AV, AS and Vul profiles to that policy. You can review the traffic log and you should see the user id used by the vendor. Regards, Jones ... View more

Re: Allowing Microsoft and Java Updates

by in General Topics
‎09-22-2011 11:14 PM
‎09-22-2011 11:14 PM
Hi, Have you checked the log what file type has been blocked? Have you tried to allow MS-Update as the app and allow all file types to see what file type actually we have allowed? Regards, Jones ... View more

Re: URL Logs to Panorama

by in General Topics
‎09-22-2011 11:08 PM
‎09-22-2011 11:08 PM
Hi, Go to the option of the policy, create the log forwarding profile and choose the informational level of threat log. You need to have the forwarding profile for all policy with URL profile enabled in order to forward all URL logs to Panorama. Regards, Jones ... View more

Re: Syslog Issue.

by in General Topics
‎09-22-2011 09:13 AM
‎09-22-2011 09:13 AM
Hi, If you want to forward your log to syslog servers as well you need to forward it from the PA box. Panorama cannot forward the log to syslog server. Jones ... View more

Re: Web filtering only license/Idle time outs.

by in General Topics
‎09-22-2011 07:38 AM
‎09-22-2011 07:38 AM
Hi, Would you tell us more your observation and your config? Regards, Jones ... View more

Re: FTP over HTTP

by in General Topics
‎09-22-2011 07:04 AM
‎09-22-2011 07:04 AM
Hi, Glad to know that. Jones ... View more

Re: why are there duplicated threats (protections) ?

by in General Topics
‎09-22-2011 05:56 AM
‎09-22-2011 05:56 AM
Hi, We differentiate sig by Threat ID. Would you list out some examples that you are seeing different ID but same sig description? Jones ... View more

Re: VPN for multiple internal subnets?

by in General Topics
‎09-22-2011 05:42 AM
‎09-22-2011 05:42 AM
Hi, You cannot run VPN in VWire mode. You need L3 interface and configure tunnel interface for that. When you configure VPN, you can leverage virtual router and security policy control how internal users to access those subnets and who will be allowed for the access Jones ... View more
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎08-18-2015 09:06 AM
Latest Tags
No tags yet
Likes From
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks