About rsaber

Hi, We configured agentless User-ID with our PAN OS 5.0.2. We created policies using the AD usernames and it is working fine. However, We are trying to configure our GP to authenticate using the AD users. This is not working and we are getting the following error when trying to login: User is not in allowlist description contains 'User \'abc\user1\' failed authentication.  Reason: User is not in allowlist From: 8.8.8.8 Then invalid user and password description contains 'User \'abc\user1\' failed authentication.  Reason: Invalid username/password From: 8.8.8.8. We are also regularly receiving this error: ( description contains 'ldap cfg ABC failed to connect to server 1.1.1.1:389, source: 2.2.2.2: Strong(er) authentication required' ) Any suggestions? ... View more

Hi, I have traffic going from A.A.A.A to B.B.B.B, The problem this is working with the static route. But I need to use PBF instead for monitoring reasons. When removing the Static route and using PBF traffic is not reaching the target. I am configuring as follows: For PBF: If the source is A.A.A.A send the traffic to M.M.M.M For Static route: If the destination is B.B.B.B send the traffic to M.M.M.M ... View more

Hi, I am recieving the following error when issuing a commit, Management server failed to send phase 1 abort to client sslvpn Management server failed to send phase 1 to client useridd Commit failed The only change in configuration is adding new local users which are used for global protect. I am running 5.0.1 Regards ... View more

Hello, Can I use a Palo Alto 2020 Firewall to dedicate a minimum and maximum internet usage BW per username or IP address, if so is there any license needed. Thanks ... View more

Hello, Basically the scenario is that we have one exchange server behind the firewall, external users are accessing this server usning a host name mapped by a service provider to two different Public IP's using DNS round robin, Is it possible to configure two NATing rules for the same single host (the server). This way what ever IP the host name is hitting it will be successful, But how can I overcome the issue for outgoing traffic, can I use PBR to send traffic using one link and in case it fails it will failover to the other link. So at the end Incoming Traffic will be round robined and outgoing traffic will use one link and only failover when necessary. Regards ... View more