About JoHyeonJae

JoHyeonJae · ‎02-06-2023

Hello @Adrian_Jensen Does that mean that Azure SAML has a re-OTP force function, but does not support it, so the above phenomenon occurs?   Is this a phenomenon that only applies to Azure SAML? Because Okta SAML seems to be working normally.

JoHyeonJae · ‎02-05-2023

Hello all, The customer has an inquiry about OTP authentication when logging in to the GP after booting the PC. When I log in again after disconnecting, I can log in without OTP authentication (session authentication is maintained), so is there any way to set up OTP authentication every time I disconnect?   The authentication method is Azure SAML authentication. Thanks!

JoHyeonJae · ‎02-01-2023

Hello all, We are using VM-100 deployed in vmware. Currently, I have installed PAN-OS 10.1.0 and an auto-commit failed issue has occurred. Therefore, I tried to change vsys ID, but there is no related setting. Does anyone have experienced this issue and resolved it? Thanks

JoHyeonJae · ‎01-26-2023

Hello all, Hope you are doing well. The following pop-up occurs when connecting to the GP Agent. The OS of the PC that occurs is Mac OS. Does anyone know how to solve this problem? Best regards,

JoHyeonJae · ‎01-17-2023

@sselva Thanks!

JoHyeonJae · ‎01-12-2023

@TomYoung Yes, a Syslog failure has occurred and I have cleared all the discarded sessions, and syslog Issue has been resolved. This is the reason why the customer asked me why Discard UDP is needed.

JoHyeonJae · ‎01-12-2023

@TomYoung Thank you for your kind explanation. The cause that NGFW is not creating a new UDP session is still under analysis. Could you please explain more what are the benefits of setting up Discard UDP timeout? Thanks,

JoHyeonJae · ‎01-11-2023

Hello all, Recently, customers are experiencing a phenomenon that Syslog traffic coming into the same source port remains in the Discarded Deny Session. As a result of my checking, it was confirmed that it occurred while being constantly refreshed due to Discard UDP Timeout in Paloalto Session Timeout setting. Discard UDP : Maximum length of time (in seconds) that a UDP session remains open after PAN-OS denies the session based on Security policy rules configured on the firewall (range is 1 to 15,999,999; default is 60). Does anyone know why Discard UDP values are needed? Thanks and regards,

JoHyeonJae · ‎01-05-2023

Dear @sselva First of all, thank you for your information. Does that mean that the function will not work? Thanks and regards,

JoHyeonJae · ‎12-21-2022

MDM used WorkspaceOne from VMware. Do I have to manually handle those parts 2 and 3 when distributing GPs from Jamf? Or, I would like to ask for advice if the setup of WorkspaceOne is wrong.

JoHyeonJae · ‎12-21-2022

Hello all, We are going to distribute GPs through MDM.  We tested it through the Jamf distribution guide below the link. (https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAW8) I distributed GPs through MDM, but the below three problems are happening.   1. Manually enter password 3 after installation. (Item 1 is estimated to occur 3 times due to certificate installation.) 2. "GlobalProtect" would like to administer your computer. Administration can include modifying passwords, networking, and system settings. -> OK Click (manually) 3. GlobalProtect item is added to Full Disk Access as shown below, but Enable is not checked Does anyone know how to set MDM for 2 and 3? Thanks and Regards,

JoHyeonJae · ‎12-14-2022

Hello all, We are facing an error accessing VDI through the internal network after connecting GP within the customer company (socket error 10060) The same phenomenon occurs in Mac and Windows that use GP 6.1.0 version regardless of the operating system. On the other hand, it can be accessed normally when connecting to VDI after connecting to GP outside the company network. And when GP 6.1.0, the internet is not connected for a short period of 30 to 180 seconds (based on GP Session Uptime) The delay issue did not occur in the previous version (5.1.7). Please give me advice if there is anyone who has experienced and solved the same issue as me.

JoHyeonJae · ‎12-12-2022

Hello all, Is access control possible with Azure AD connectivity to SaaS solutions (Figma, Slack)? I want to know the list which can control in Palo Alto. https://docs.paloaltonetworks.com/saas-security/saas-security-admin/saas-security-inline/get-started-with-saas-security-inline/integrate-with-azure-active-directory Thanks and Regards,

JoHyeonJae · ‎12-07-2022

Hello all, Hope you are doing well. PA-460 (HA) : PAN-10.1.7 M-200 : PAN 10.1.7 I understand that the device registration authentication key expires after 90 days.   By the way, according to the admin guide, a message will be displayed to re-authenticate the authentication key to remaining valid after 90 days, but is this message only displayed in panorama?    Additionally, does the message appear in a pop-up format such as yes or no, or do I have to get it issued again through the Renew button like a normal certificate in the device tab? There is no related document 😞 Thanks,

JoHyeonJae · ‎11-30-2022

@BPry Thank you for your update! We didn't make any OS upgrades or configuration changes other than deleting FQDN Object, and we had a problem after deleting FQDN DNS. I think there was not a problem because the two FQDN Objects were lookup the same IPs.

Member Since	‎02-08-2022 01:12 AM
Date Last Visited	‎09-18-2023 01:50 AM
Posts	81
Total Likes Received	14

Online Status	Offline
Date Last Visited	‎09-18-2023 01:50 AM

About JoHyeonJae

RE: Network blocking and detecting capabilities in case of similar abnormal symptoms traffic

RE: Network blocking and detecting capabilities in case of similar abnormal symptoms traffic

Network blocking and detecting capabilities in case of similar abnormal symptoms traffic

Re: SSL Decryption Session is Full

SSL Decryption Session is Full

Re: Edit Continue button in response pages

Edit Continue button in response pages

RE: "Hardware UDP session offloading" on a PA-460

Re: Unable to change hardware udp session offloading setting as false

Re: Unable to change hardware udp session offloading setting as false

VM auto commit failed because Vsys ID must be between 1 and 0

RE: User Mapping - AD access denied

GlobalProtect "Detected another instance" : An old GlobalProtect instance exists, new instance cannot be started!

When Dynamic Updates Version 8634-7663 is downloaded, commit does not work.

Allow User to Uninstall GlobalProtect App option for MAC

Panorama kubernetes plugin Monitoring interval

SNMP Power Supply OID value

Re: What cloud services are affected by CVE-2020-1982?

Panorama plugin log(AWS&K8S) delay

GlobalProtect Machine account exists with device serial number config

Nominated Discussion: Unable to Change Hardware UDP Session Offloading Setting

Nominated Discussion: SSL Decryption Session is Full

Nominated Discussion: Syslog Forwarding Issue

Re: OTP authentication with GlobalProtect

OTP authentication with GlobalProtect

VM auto commit failed because Vsys ID must be between 1 and 0

GlobalProtect "Detected another instance" : An old GlobalProtect instance exists, new instance cannot be started!

Re: Deployment GlobalProtect MDM - jamf

Re: Discard UDP from Paloalto Session TImeout

Re: Discard UDP from Paloalto Session TImeout

Discard UDP from Paloalto Session TImeout

Re: Deployment GlobalProtect MDM - jamf

Re: Deployment GlobalProtect MDM - jamf

Deployment GlobalProtect MDM - jamf

Cannot VDI access after upgrade to GlobalProtect 6.1

Azure AD connection for SaaS solutions (Figma, Slack)

Question about device registration authentication key re-certify

Re: The FQDN issue could not be refreshed.

Unlock your full community experience!

About JoHyeonJae