About zarina

zarina · ‎07-23-2013

You can set the action to allow/deny URLs when the license expires: https://live.paloaltonetworks.com/docs/DOC-4329

zarina · ‎07-20-2013

Captive portal will only with with web based traffic: http and https (with decryption enabled).

zarina · ‎07-03-2013

QoS statistics graph shows you the usage of realtime bandwidth. If you want to monitor the bandwidth usage, you will need to use third party tools like Netflow or the templates listed here: https://live.paloaltonetworks.com/thread/4367?tstart=0

zarina · ‎07-03-2013

The ip-user mapping is received through the agent. If you need to use groups/users in the policy make sure to configure group mapping on the device: Device -> User Identification -> Group Mapping Settings

zarina · ‎06-28-2013

This will help you to view the config in different formats: https://live.paloaltonetworks.com/docs/DOC-1300

zarina · ‎06-24-2013

Looks like the CRL/OSCP check is timing out - look at Status: timed-out and hence the error message. Can you verify if there is any network latency in retrieving the crl list or reaching the server itself?

zarina · ‎06-11-2013

We do not have a mechanism to turn logging off for these profiles. If you need this feature, reach out to your SE to file a feature request.

zarina · ‎05-29-2013

you can look at indexgen logs for any error messages: less mp-log indexgen.log

zarina · ‎05-23-2013

The userid option is introduced in 5.0 and need to be enabled when you are using the agentless user id and also when distributing the mappings to other firewalls

zarina · ‎05-23-2013

We are working on this issue where when multiple sub interfaces are configured for DHCPv6, only one sub interface works. Please open a case with Support or your reseller to get further details/updates on this issue.

zarina · ‎05-23-2013

If the GP client is lower than 1.2.x, the command is PanGPUpdateer.exe -u for 1.2.x and greater, it is PanGPS.exe -u

zarina · ‎05-22-2013

Hope this document helps: https://live.paloaltonetworks.com/docs/DOC-2695 When GP is installed, we modify the gina dll which is why you are presented with a login. You can run the command listed in the document to restore the auto login.

zarina · ‎05-20-2013

We do not have a support for this feature at this time. Please contact your SE to file a feature request if you want this included in the future versions.

zarina · ‎05-17-2013

Yes. You should be able to select the loopback interface in your NAT policy

zarina · ‎05-15-2013

You can customize the captive portal authentication page but we do not support a redirection of the URL to a specific URL after authentication.

Date Registered	‎11-14-2011 01:02 PM
Date Last Visited	‎03-04-2020 02:10 PM
Total Messages Posted	210
Total Likes Received	89

Online Status	Offline
Date Last Visited	‎03-04-2020 02:10 PM

About zarina

Re: Log DB quota for Panoram

Re: What is the 'ez pid' on show session id XX output?

Re: Cleaning obsolete firewall rules

Re: Active / Active Config sync

Re: Application Incomplete - Leading causes?

Re: Migrating OSPF to the Palo Alto

Re: What is the 'ez pid' on show session id XX output?

Re: NAT Pool Usage

Re: about agentless user-id in panos-5.0

Re: blocking google apps via URL

Re: custom url category issues

Re: Captive Portal

Re: QoS Reporting

Re: User mapped via CLI but no through Web-UI

Re: Best way to set output in cli to set commands

Re: Trouble decrypting Google traffic

Re: Block but don't log

Re: searching traffic logs are very slow on M-100

Re: User-ID Management Setting

Re: DHCPv6 relay - "interface is not on"?

Re: GlobalProtect Client Auto Login Woes

Re: GlobalProtect Client Auto Login Woes

Re: commit confirmed X on PaloAlto firewall ?

Re: Nat with loopback int ip

Re: How to redirect to a specific URL after user authenticates successful from Captive Portal ( web-form )

Network Security

Cloud Security

Security Operations

About zarina