This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew

About _slv_

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
_slv_
since ‎06-13-2012
L4 Transporter
User Activity
User Profile
Latest posts by _slv_
View All
User Badges
Community Statistics
Member Since ‎06-13-2012 08:35 AM
Date Last Visited
Posts 658
Total Likes Received 97

Re: dependency warning - how to force it?

by in General Topics
‎06-25-2013 06:07 AM
‎06-25-2013 06:07 AM
Hi I'm using 5.0.5 PAN, warnings related to gmail comes after some automatic update (not after upgrade from 5.0.3 to 5.0.5 in my example). As I understand this is feature and it can't be switched off - I have to get used to or add such aplication to the rules - Do I'm a right? Regards Slawek ... View more

dependency warning - how to force it?

by in General Topics
‎06-25-2013 05:19 AM
‎06-25-2013 05:19 AM
Hi I'm bit confused about dependency ... During commit i have:     vsys1: Rule 'XXXXXXXXXXX' application dependency warning:      Application 'gmail-base' requires 'imap' be allowed, but 'imap' is denied in Rule 'Scholastycy - deny rest'      Application 'gmail-base' requires 'pop3' be allowed, but 'pop3' is denied in Rule 'Scholastycy - deny rest'      Application 'gmail-base' requires 'smtp' be allowed, but 'smtp' is denied in Rule 'Scholastycy - deny rest'     vsys1: Rule 'YYYYYYYY' application dependency warning:      Application 'msrpc' requires 'ms-ds-smb' be allowed      Application 'msrpc' requires 'netbios-ss' be allowed      Application 'msrpc' requires 'ms-ds-smb' be allowed      Application 'msrpc' requires 'netbios-ss' be allowed Both of this rules are working as expected. XXXXXXX allowing sending email from multifunction printer. I'm sure that imap/pop3 isn't nessesary for sending emails. The YYYYYYY has aplication: ms-kms. ms-rdp, msrpc and t.120 and this is enought for RDP and activating Office 2010  and Windows 7. Do I'm able to stop complaining about it during commit? ... View more
Labels:

Re: Global Protect and two gateway

by in General Topics
‎06-25-2013 04:29 AM
‎06-25-2013 04:29 AM
Thank you for all of you. Now i have two portals and it's seems to be working. I know that I can use authentication sequence but for second GP portal there must by Radius only auth. Now I have to do NAT with special IP for second GP gateway. I did nat rule with filter for source adresses (second gateway has different network adresses than first) but I stuck with security policy. Because both of my GP are in the same zone (on PA200 I have very limited amount of zones) I need to use filter for source addresses. Do I have other options? Can I select users authenticated by radius server? ( I can't see such option but maybe I'm wrong...). My security polices: and security policies In this situation do I need "GP to internet" or "VPN NAT" is enought? I put "GP blokada" right after allow policies because I need to limit access to internet only - is it correct? Regards SLawek ... View more

Re: Global Protect and two gateway

by in General Topics
‎06-25-2013 03:32 AM
‎06-25-2013 03:32 AM
hmm thats interesting why my PA200 dosn't complain about licences during commit proces (when I have one portal and two gateways) ... View more

Re: Problem to identify a user with accented character

by in General Topics
‎06-25-2013 02:42 AM
‎06-25-2013 02:42 AM
Please go to support page and check changelogs for last few releases - there must be information about UTF. I'm without support at the moment and I cant to it for you. ... View more

Re: WiFi with 802.1x and Radius authentication - source user in traffic log problem

by in General Topics
‎06-25-2013 02:38 AM
‎06-25-2013 02:38 AM
>The following Doc talks about Radius (Cisco ACS) and User-ID integration in the environments using 802.1x uff - I expected simplest way to do it. Syslog server isn't a problem but as I remember that API uses administrator provilages of PAN, I wouldn't share that credentials. ... View more

Re: WiFi with 802.1x and Radius authentication - source user in traffic log problem

by in General Topics
‎06-25-2013 02:28 AM
‎06-25-2013 02:28 AM
>You can force the students to authenticate against captive portal. I know. I'm using CP for test purpose. >the students would have to enter the credentials just once, and they need not login multiple times I know, logon from notebook is OK, but do it from smarfones - it so compicated (in my opinion, because smarphones has a small screen and etc). Students want to be connected without enter credential every time he is in wiFi range. So that is the reason why I'm started thinking about 802.1x ... View more

Re: Global Protect and two gateway

by in General Topics
‎06-24-2013 04:43 AM
‎06-24-2013 04:43 AM
I configured one portal and two gateways. ... View more

Global Protect and two gateway

by in General Topics
‎06-24-2013 04:29 AM
‎06-24-2013 04:29 AM
Hello I have PA200 without licence for second GP Portal. I did a second gateway because I thought that this should solve my problem. I need to let access to some website to my users but with my IP address. Thease people has accounts on radius server. I did second gateway for them. I have separate IP and SSL certyfiacate for this, separate config (different VPN network, tunnel interface, authentication profile). But when I try to point to GP Client to use gateway2 as a portal it's complain about certificate. I know that I sould put there a portal url not gateway! - but how to tell to GP client to use second gateway? On my first gateway are logging peopple that has accounts on ActiveDirectory or locally on PA device. I thought of using only one gateway but then I will be unable to recognize users in security policies (create rules for users fro AD different that from Radius.) sorry for my english ... but I hope that you undertand what I'm trying to do. If I'm wrong - in which situation we are using more than one gateway? With regards Slawek ... View more
Labels:

WiFi with 802.1x and Radius authentication - source user in traffic log problem

by in General Topics
‎06-24-2013 02:50 AM
‎06-24-2013 02:50 AM
Hello I'm thinking about WiFi network for my studnets. Now they are authenticating on HotSpot on Mikrotik AP's. They are complaining that must enter login and password so often. HotSpot also isn't good for me becase I can't see authenticated users in PAN logs. Is it possible to configure 802.1x authentication on AP and have in logs proper user name of logged user that is using IP attached from PAN DHCP? Authentication is made by Radius (Free Radius) - not by Active Directory! If my idea is bad, please advice me how to do that With ragards Slawek ... View more
Labels:

Re: Problem to identify a user with accented character

by in General Topics
‎06-24-2013 02:12 AM
‎06-24-2013 02:12 AM
What version of PAN and agent are you using? UTF support is on latest version of PAN (as I remember) ... View more

Re: What timezone of release date for dynamic update?

by in General Topics
‎06-16-2013 09:29 AM
‎06-16-2013 09:29 AM
Exactly! Now, our problem is that we don't know what FR other people requested. From time to time someone put some information ot this forum about their FR. Other vendors ( I heard that Checkpoint has) has where FR are listed and every user (with active support) can vote for it. That is good for both side. Regards SLawek ... View more

Re: What timezone of release date for dynamic update?

by in General Topics
‎06-14-2013 06:10 AM
‎06-14-2013 06:10 AM
Hi When I worked on issue related on Dynamic Updates I also realize that te dates are from different time zones. In my opinion every date should be marked with PT and CEST - just for better readability/understanding As a support engineer sugested send feature request to my sales engineer. This FR has a name "Correct timezone time on dynamic updates" and has a 3 votes. If you feel that is usefull for You - please vote for it Regards Slawek ... View more

Re: GP - second gateway creation problem

by in General Topics
‎06-09-2013 03:44 AM
‎06-09-2013 03:44 AM
Thx ... I missd one field Thank you for your help! Regards SLawek ... View more

Re: GP - second gateway creation problem

by in General Topics
‎06-09-2013 12:47 AM
‎06-09-2013 12:47 AM
I deleted and created new one - but it doesn't help me. and Network settings is greyed out I think that I stuck on tunnel interface so I try to create it first on Network>Interface>Tunell When I klicked add and fill up fileds the OK button is inactive also I can't change it name. Is it another PA200 limitation? What I do wrong? Regards SLawek ... View more
Register or Sign-in
Contact Me
Likes Given To
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2025 - Palo Alto Networks