About SOC_CSG

SOC_CSG · ‎05-18-2017

Hi everybody I have upgraded a Pa-3050 from 7.1.8 to 7.1.9, all seems to be OK but the DataPlane CPU is above 90% Management CPU 16% Data Plane CPU 95% Session Count 37023 / 524286 I noticied if the session count is lower, the CPU also decrease , but this behaviour didn't happens in the previous release. Do anybody knows if there is a problem with the release 7.1.9? best regards COS

SOC_CSG · ‎04-18-2017

Hello all, Yes, we have installed decrypt cert on the machines but the problem persists. Its possible we need to create new certificate (more secure than SHA1) and install it againt on the hosts.

SOC_CSG · ‎04-16-2017

Hello all, We are having some problems with SSL Decrypt with Chrome. When we try to connect to some pages appears certificate error that I attached. I have PanOS 7.1.8 and only occurred this with Chrome. Know somebody how I can fix this problem ? Kind Regards

SOC_CSG · ‎03-28-2017

Hello all, At the end, we disabled WMI and the problem was resolved. At the moment, we are working only with UIA and all devices working properly. Thanks for your support. Regards

SOC_CSG · ‎03-17-2017

Hi everybody I like to know if there is a way to block incoming connections attemps to port TCP 22. I have an end-customer which has lots of connections to his public ip range 0.0.0.0/24 to port TCP22 but not hit the vulnerability 40015 (SSH User Authentication Brute-force Attempt) because it neves triggers the child signature 31914 (SSH2 Login Attempt) because there no attempt to connect, it just an scanning. I'm loooking at DoS Protection, which may works, but I'm not sure what to do in Option/Protection tab. I think I need to configure at Classified option a DoSProteccion Profile, but I'm lost, I donp't know it is better user FloodProtections or Resources Protection. Do anybody has resolved this issue?

SOC_CSG · ‎03-06-2017

Hi all I have an end-customer who is using ServerMonitoring and User-Id agent at the same time. His AD has been audited by Microsoft and discovered that their performance is affected by thew WMI probbing. My questions is. If they remove all ServerMonitoring and kept only the User-Id Agent? Do they need the WMI configuration in both Firewall and AD? best regards ACUNTIA COS

SOC_CSG · ‎03-02-2017

Hi I'm waiting for the end-customers answer. He used both ServerMonitoring and User-Id agent for user mapping, but didn't specified where the Windows10 users are mapped. I'll kept you both informed. Thanks for your time COS

SOC_CSG · ‎03-01-2017

Hi And what firewall, PanOs version and UserId agent version do you have installed? best regards COS

SOC_CSG · ‎02-28-2017

Hello, I need your help with the following scene: I have some machines with Windows 10 Operative System and I have detected a problem with the PA Firewall. The Firewall is not detecting the user (UIA), so the policy rules are denying the access. Panos firewall: 7.1.4 User Id Agent version: 7.0.4-5 I have machines with Windows 7 SO and I don't have any navigation problem. According to release information of 7.0.7-13 or earlier (User-ID Agent), the Windows 10 OS is not compatible. And the Release information of 8.0.0-42 does not specify whether W10 is supported or not. Could anyone help me? Does anyone know if 8.0.0-42 User ID Agent or other version is compatible? Thanks and regards, COS

SOC_CSG · ‎02-21-2017

That's what I said to the end-client but doesn't like it. But he will have to do it, there's no option. Thanks for your help

SOC_CSG · ‎02-21-2017

Hi Santonic The problem is the end-client doesn't want to remove the EXE from the Fileblocking profile. I already suggest what yo said but he doesn't like it best regards

SOC_CSG · ‎02-21-2017

Hi all One of my end clients has a File-Blocking profile which block all .EXES files but he needs from an specific website to download a EXE file. Is it possible like in URL profile to add an exception and allow the download? best regards Acuntia COS

SOC_CSG · ‎11-28-2016

thanks a lot!!!! It works

SOC_CSG · ‎11-28-2016

Hi everybody I got a pair of PA-3020. Some time ago I configured several interfaces to layer2 type and now they are not in use anymore. Is it possible to set them to default config, I mean with NO inteface type? I As you can see in the photo, ethernet 1/11 is (was) a Layer2 interface and I want to set it without any type, liker ether1/12 Is it possible? Best regards Gonzalo Arroyo

SOC_CSG · ‎09-19-2016

Thanks I have searched for information about this Because I am interested this topic, but I have not found anything. But your answer it seems me correct. Thanks again.

Member Since	‎05-21-2013 06:58 AM
Date Last Visited	‎11-13-2018 12:27 PM
Posts	216
Total Likes Received	12

Online Status	Offline
Date Last Visited	‎11-13-2018 12:27 PM

About SOC_CSG

Re: URL filtering Block List is not working properly

URL filtering Block List is not working properly

Re: Unable to delete Certificate

Re: Unable to delete Certificate

Unable to delete Certificate

Re: URL Filtering doesn't work with Google-base/quic/google-docs

Re: URL Filtering doesn't work with Google-base/quic/google-docs

Re: URL Filtering doesn't work with Google-base/quic/google-docs

URL Filtering doesn't work with Google-base/quic/google-docs

Prototype Attributes. Share_level and confidence: Meaning

Re: Unable to delete Certificate

Re: SNMP monitor parameters for Palo Alto

User-ID. Is WMI really needed?

Problems users with Windows 10 and User ID agent

Re: Problem connecting SSH

Re: URL filtering Block List is not working properly

Re: URL filtering Block List is not working properly

Re: URL Filtering doesn't work with Google-base/quic/google-docs

Re: Integration Palo Alto PAN-OS v7.1.X. using Custom Log Format and improve QRadar (LEEF)

Re: VPN flapping

High DataPlane CPU at PanOS 7.1.9

Re: SSL Decrypt Problem with Chrome

SSL Decrypt Problem with Chrome

Re: Problems users with Windows 10 and User ID agent

How to block TCP22 connections

User-ID. Is WMI really needed?

Re: Problems users with Windows 10 and User ID agent

Re: Problems users with Windows 10 and User ID agent

Problems users with Windows 10 and User ID agent

Re: File blocking. is it possible to allow exceptions?

Re: File blocking. is it possible to allow exceptions?

File blocking. is it possible to allow exceptions?

Re: Set Interface to default settings

Set Interface to default settings

Re: Integration Palo Alto PAN-OS v7.1.X. using Custom Log Format and improve QRadar (LEEF)

Unlock your full community experience!

About SOC_CSG