About Hithead

Hithead · ‎08-20-2015

Hi, NPS is a good idea. You have two options: 1) secure access to the network with the client MAC address. You have to enable mac-authentication against your NPS on your switch and manage all machine with the MAC address as user in you active directory. 2) Use 802.1x. enroll on each machine a computer certificate via GPO and configure your switch and clients to authenticate against NPS with 802.1x There are a lot of manuals online how to configure it.

Hithead · ‎08-19-2015

Hi all, just wondering why I see in our threat logs entries with the type wildfire-virus only for the application smtp... (I would like to post some screenshots, but I cant find the upload button?) What is the type wildfire-virus standing for? And where can I enable it for other applications as well?

Hithead · ‎06-16-2015

hi satish, PANOS 7, new license structure: "To simplify GlobalProtect licenses , a portal license is no longer required to enable internal gateway support, multiple gateways (internal or external), and/or HIP checks. This enables you to use GlobalProtect to provide a secure, remote access or virtual private network (VPN) solution via a single or multiple external gateways, without any GlobalProtect licenses." So no license is required for your installation!

Hithead · ‎05-22-2015

get in contact with your SE. They can ask PAN for more information...

Hithead · ‎05-22-2015

please follow this instruction to submit a new app: How to Request a new App-ID -->http://researchcenter.paloaltonetworks.com/submit-an-application/

Hithead · ‎05-21-2015

Hi, a new leak was found in diffie hellmann... http://arstechnica.com/security/2015/05/https-crippling-attack-threatens-tens-of-thousands-of-web-and-mail-servers/ https://threatpost.com/new-logjam-attack-on-diffie-hellman-threatens-security-of-browsers-vpns/112916 (german) http://www.heise.de/newsticker/meldung/Logjam-Attacke-Verschluesselung-von-zehntausenden-Servern-gefaehrdet-2657502.html Is PaloAlto also affected? And is PaloAlto working on a threat signature?

Hithead · ‎04-14-2015

have you already read this article: Block-Continue Page Fails to Download .exe File from Citrix URL using IE How to View or Reset the URL Block and Continue Cache Also try to use another browser. Otherwise you have to created a support ticket...

Hithead · ‎04-14-2015

just for testing: application - any // file-types - any // action - continue and try to download the file again.

Hithead · ‎04-13-2015

try to add "msoffice" in your file-types.

Hithead · ‎04-13-2015

so in general the continue page isn't working? or is there any example where it works? I would try to restore the response page (Under Device > Response Pages) to default. (old thread Continue Page not Displaying the Continue Button)

Hithead · ‎02-04-2015

hi, feature request already open: FR ID:1829 please contact your SE to vote for it! I already did and we need more votes

Hithead · ‎11-25-2014

hi, we had the same issue with Cisco phones. With delay ring and no voice. With application override it works perfectly: As you can see... from the phone (policies *-1-1; -2-1; 3-1) to our voice network and the other way around (policies *-1-2; -2-2; 3-2). Just create customs app with e.g.: sip-override: udp/5060 ; rtcp-rtp: udp/16384-32767 ; sccp-override: tcp/2000. We are using the policies with the Version 6 as well...

Hithead · ‎10-29-2014

Update: The documentation was not correct. It will be updated soon...

Hithead · ‎10-28-2014

set up the key wrap-cp-guid with the value {8BF9A910-A8FF-457F-999F-A5CA10B4A885}, but the GP tile is not displaying at windows logon...

Hithead · ‎10-28-2014

finally, the new admin guide is out GlobalProtect Administrator's Guide 6.1 (English) the RegKey is wrap-cp-guid and filter-non-gpcp will try it and report the results

Member Since	‎09-19-2012 05:12 AM
Date Last Visited	‎04-25-2025 06:55 AM
Posts	242
Total Likes Received	40

Online Status	Offline
Date Last Visited	‎04-25-2025 06:55 AM

About Hithead

Re: User-ID suddenly stops recognizing Users

Re: URL Filter doesn't work in Deny rule

Re: How to Disable Global protect from trying to connect every time the workstation is started

Re: Global Protect - Traffic interrupted while still showing connected

Re: Can't contact LDAP server/connect error

Re: Antivirus reset-both action for mail protocols

Re: Blocking extensions using data filtering

Re: Ultrasurf again - still getting through, how to block?

Re: PANGP virtual ethernet adapter missing on windows 7

Re: How to create and configure 100 tagged subinterfaces via CLI

Question about threat logs - Type wildfire-virus

Re: Disable SSL - IPSEC only

Disable SSL - IPSEC only

Re: Disable SSL - IPSEC only

Re: Antivirus reset-both action for mail protocols

Enable Access to Office 365 with MineMeld [Updated]

GoToMeeting no longer working, http-proxy blocked

New Global Protect 3.0 is not good enough

Re: Antivirus reset-both action for mail protocols

Re: What is still missing or needs to be improved in PA Next Generation Firewalls ?

Re: How to make Windows / Cisco / PA network secure?

Question about threat logs - Type wildfire-virus

Re: Gp Configuration

Re: Skype: block file transfer !

Re: Skype: block file transfer !

New Logjam Attack

Re: File blocking .doc isnt working

Re: File blocking .doc isnt working

Re: File blocking .doc isnt working

Re: File blocking .doc isnt working

Re: Custom App to allow Office 07/10 (docx/xlsx/etc) while blocking zip

Re: VOIP RINGING DELAY ISSUE

Re: Extended SSO Support for GlobalProtect Agents

Re: Extended SSO Support for GlobalProtect Agents

Re: Extended SSO Support for GlobalProtect Agents

Unlock your full community experience!

About Hithead