Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- ›
- About Ameya-Kawimandan
About Ameya-Kawimandan
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
12-16-2020
385Posts
249Likes
121Solutions
Dec 16, 2020Last Visited
User
Activity
User
Profile
Latest posts by Ameya-Kawimandan
| Subject | Views | Posted |
|---|---|---|
| 987 | 01-07-2014 05:50 PM | |
| 1644 | 01-07-2014 04:31 PM | |
| 1047 | 12-31-2013 03:19 PM | |
| 800 | 11-10-2013 12:41 AM | |
| 720 | 11-08-2013 01:16 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 06-12-2012 02:12 PM | |
| 1 | 06-05-2012 11:52 AM | |
| 1 | 05-31-2013 03:28 PM | |
| 1 | 04-24-2013 05:26 PM | |
| 1 | 08-26-2013 02:55 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 5 |
Retired Member
|
by
Retired Member
| |
| 4 |
Retired Member
| ||
| 1 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 02-22-2012 01:14 PM |
| Date Last Visited | 12-16-2020 01:06 PM |
| Total Messages Posted | 439 |
| Total Likes Received | 249 |
09-23-2013
03:27 AM
1 Kudo
VWIRE mode with following settings should be a good way to start. 1> All the tags allowed 0-4094 2>Non-Syn-tcp-reject turned off 3>assymetric bypass tuned on These settings would ensure that PA functions as a transparent device, staying inline. Security features can be selectively turned on an ad hoc basis. -HTH...!
... View more
09-23-2013
01:58 AM
Ref Accessing Management Plane and Data Plane Uptime on a Palo Alto Networks Device Uptime may differ between management plane and data plane. Management Plane CLI command: show system resource | match up The following is a sample output of the command. Data Plane CLI command: show system info | match uptime The following is a sample output of the command.
... View more
09-22-2013
03:44 AM
Here you go...! GlobalProtect Configuration Tech Note How to Configure GlobalProtect Troubleshooting GlobalProtect, PAN-OS 4.1
... View more
09-22-2013
03:22 AM
2 Kudos
I believe you are referring to the following test cases: Can GlobalProtect Portal Page be Configured to be Accessed on any Port? Access to GP Portal need open access to port 443 on the external interface IP which can make it vulnerable. For additional security loopback interface can be used to host GP services on a non-default port , where a GP user connects to GP portal on an external IP + non-default port socket which gets translated to loopback + port 443. How to Configure Global Protect Gateway On Loopback Interface with iPhone Access Exhibits how non-ssl services like Outlook web access can be hosted External IP using Loopback. HTH..!
... View more
09-22-2013
02:58 AM
1 Kudo
If these users need connect from the outside/internet, enabling CP on WAN interface would be taxing for the firewall resources. Only alternative that I can think of is using Global Protect configured with External Gateway. Users can connect to GP portal/gateway and authenticate using their AD/Radius/Kerberos/Local DB credentials and would be assigned an IP from the configured IP pool. Security policies can be configured between the tunnel zone and Inside zone to access the RDP server. Plus....GP (1Portal + 1Gateway ) does not need licenses starting OS_4.1.x HTH..!
... View more
09-20-2013
05:32 AM
1 Kudo
Following solutions would be helpful in this scenario : 1> Scripting solution for User ID working with Microsoft IAS/NPS 2> The following Doc talks about Radius and User-ID integration in the environments using 802.1x devices and wireless access points and controllers. A script can be configured to run on the Syslog server that will extract the user and IP information from the message, format it correctly for the UID-API, and then send it to the API agent. UserID API integration using Syslog Also check : https://live.paloaltonetworks.com/thread/7239
... View more
09-19-2013
03:36 AM
You can configure eth1 as L2,create L2 sub-interfaces foe eth1 with tags needed and assign these to a VLAN. An L3 vlan interface can then be created to terminate OSPF . Ref :Layer 2 Networking
... View more
09-19-2013
02:33 AM
If by losing the interface, you mean accessing HTTPS service on eth1/4. You need to access this interfaces on port 4443 How to Access the WebUI when GlobalProtect Is Enabled
... View more
09-19-2013
02:28 AM
Hello Roger, Configure Layer3 sub-interfaces for physical interface that connects to the Trunk port as exhibited in the following documents How to Create Tagged Sub-Interfaces (section For PAN-OS 4.1) You may also use following tech note for reference : Securing Inter VLAN Traffic
... View more
09-19-2013
02:13 AM
Just to be clear, with OS-5.0 you may use to the User-ID collector feature to pass on User-IP mappings (Captive Portal, GP mappings) from firewall A to B (User ID collector OS-5.0) firewall. But the option to selectively pass only GP User-IP mappings is not available. Ref How to Configure and Verify User-ID Collector in PAN-OS 5.0
... View more
09-18-2013
10:18 PM
1 Kudo
You would not be able to delete an address object if its referenced in an address group or a policy. Attempt to delete a referenced object would show up a dialogue box describing its references in the config.
... View more
09-18-2013
10:04 PM
Hello , At this moment ,feature to allow redistribution of GP user-ip mappings, is not available. Please consult your SE to discuss the option of filing a feature request.
... View more
09-10-2013
02:46 AM
1> Currently PAN_OS firewalls do not have a provision to send reports based on a trigger condition such as Threat detection. You may configure email alerts using Email server profiles which would send you an email when a Threat log is generated. You may run reports manually when these alerts are received. 2>Setps to configure : How to receive Email threat notification? 3>You may contact your SE to discuss the options for filing a Feature request if this feature is important to you.
... View more
09-09-2013
05:12 PM
2 Kudos
Service account should be part of Distributed COM Users, Server Operators and Event Log Readers groups Following document enlists the rights needed. It applies for Agent and Agentless UserID. How to Configure Agentless User-ID in PAN-OS 5.0.x
... View more
09-09-2013
01:56 PM
The document enlists all the steps to be performed before opening case with support. In most of the case, PCAPs from Windows Server 2012 and Windows Server 2008 R2 should help in validating the application misidentification. Traffic logs and show session id <id> o/p from working and nonworking scenario would help in validating the mis-id.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
12-16-2020
01:06 PM
|
Latest Tags
No tags yet
Likes From
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
