About emr_1

emr_1 · ‎07-19-2013

That's as expected. You need GP-Gateway license for Android and iOS. You can find license information in following document. (page 3) Regards,

emr_1 · ‎07-17-2013

I found following article. Sucuri Research This is pretty interesting technique, though if people hits this kind of malware, is Threat Prevention (or might be wildfire?) able to detect this malware? Regards,

emr_1 · ‎07-08-2013

How about zone level? You can configure it under zone protection configuration. Regards

emr_1 · ‎06-26-2013

Hi Thank you for your reply. I could generate client cert and successfully auth'ed by client certificate. I have one more question. I generated two certs, and confirmed both certs works fine. Afterward, I revoked one cert, though I can still login to GP Portal using user002. Doesn't it revoke just after I hit 'revoke' from GUI? (I mean do I need to wait few minutes? hours?) Do you have any idea? Regards

emr_1 · ‎06-26-2013

I made 5 users into LocalDB, and I configured GlobalProtect Portal & Gateway. It works fine so far. Now I want to generate 5 client certificates for each user and use Client Cert Profile and Local DB as two factor auth. when I connect to GP. My PANOS is 5.0. Is it possible to publish client certs? I could confirm I can configure CA under Device tab > Certificate Management > Certificates. But I think I CANNOT generate client certs using this CA. If I'm wrong, please correct me and tell me how to. If I'm correct, I'll prepare Windows 2008 or 2012 server for CA and client certs. Regards, Emr

emr_1 · ‎06-20-2013

I found one command that might help you...I hope. try 'set application dump on rule <rulename> protocol 17 destination-port 53' you can see green down arrow besides each traffic log after you enter this command I just mention that if I enter 'set application dump on rule <rulename>', my PAN device somehow collected pcaps for all traffics. I think only rulename does not work properly. ***Additional Comments*** I confirmed that rulename filter does not work even I specify protocol number and destination number. This command would not help you. I apologize for it.

emr_1 · ‎06-19-2013

I think there is no way to specify security rule for packet capturing. Can you use 'test security-policy-match ...' command instead?

emr_1 · ‎06-12-2013

Hi I found following two addressed issue from 4.1.13 release note. Does these two sound similar to your issue? 51225—When an interface was configured with hard-coded options, such as setting the duplex to full instead of auto, the interface did not come back up after a reboot. The same interface worked fine after setting it to auto negotiate. This occurred on a PA-2020 firewall and was due to an issue where the interrupts were not being properly cleared on the interfaces. 49986—The link speed and duplex settings for the dedicated HA interface on the firewall were defaulting to auto-negotiate although configured to use a specific speed and duplex value. With this fix, the dedicated HA interfaces now maintain the link speed and duplex settings defined for the interfaces. Regards, Emr

emr_1 · ‎06-07-2013

I add information to panos's reply. If you need to use internal gateway, you need GP Portal license. Reference:

emr_1 · ‎06-06-2013

If Wii U has private IP address and PaloAlto applies NAT to this session, the reason he could not connect to P2P network might be this :

emr_1 · ‎06-05-2013

By default, you can't display block response page with HTTPS websites. There are two ways to show it. One is to use ssl-decryption rule, another is to enable url-proxy. For url-proxy in detail, please refer to How to Configure the Palo Alto Networks Device to Serve a URL Response page Over an HTTPS Session without SSL Decryption On my PA-200 with 5.0.5 works fine by url-proxy and no decryption rules. Regards,

emr_1 · ‎06-03-2013

Yes. You can find the word from Admin Guide for PANOS 3.1. On Page 38, it says as below: ===== The system on which the User-ID Agent is installed must be running Windows 2008, Windows XP with Service Pack 2, or Windows Server 2003 with Service Pack 2. ===== You can also find the screenshot for UIA 3.1 on page 39 (figure.10) Regards,

emr_1 · ‎05-23-2013

page15 In addition, I'll let you know how to use Adobe PDF Reader. Adobe Reader X * Save, view, and search PDFs If you are using other PDF Reader, please google it by yourself. People was discussing about same topic in the following thread. I recommend you to read this thread too.

emr_1 · ‎05-22-2013

To access migration tool community, you need permission. To get permission for migration tool community, you need to ask your local SE. You can download the tool in this community.

emr_1 · ‎05-22-2013

Yes, in another word, I want to generate spyware threat log (I don't need vulnerability and virus log for this test) on my PaloAlto. I'll try to download each file from Malc0de Database and see what happens.

Member Since	‎05-10-2010 06:49 PM
Date Last Visited	‎01-10-2025 02:14 AM
Posts	359
Total Likes Received	120

Online Status	Offline
Date Last Visited	‎01-10-2025 02:14 AM

About emr_1

Re: GlobalProtect app being automatically uninstalled as PC moves from one LAN to another LAN

Re: Difference between Rulebase Security Rules and security policy in CLI

Re: compatibility issue between GP and IOS18.2

Re: Panorama moving to LEGACY MODE

Re: GP - Split Tunneling

Re: CLI: setting and unsetting log forwarding

Re: Sonicwall Firewall v6.5.4 migrate to PaloAlto Next Generation Firewall

Re: Minimize log size

Re: License for feature lcaas will expire on 2024/10/30

Re: License for feature lcaas will expire on 2024/10/30

Re: compatibility issue between GP and IOS18.2

Re: GP - Split Tunneling

Re: The required '11.1.0' base image must be loaded before this image can be loaded

Re: request sc3 reset API

Re: Does Global Protect RADIUS support Message Authentication? (to mitigate BlastRADIUS 9/10 CVSS vulnerability )

Re: TID 95187 is not on my signature list

Re: what does "SWITCH" in hardware architecture mean?

Re: any solution to keep tracking user IP mapping?

Re: any solution to keep tracking user IP mapping?

Re: [need help]can't see new incoming logs after upgrading M-100 into 8.1.12

Nominated Discussion: What does "SWITCH" in hardware architecture mean?

Nominated Discussion: How to Change Forward Decrypt Trust Certificate

Re: Licence problem with Iphone/Android GlobalProtect client

Can PAN detect this kind of malware?

Re: permitting/denying asymetric TCP flows at the VYSY level?

Re: Can PAN device publish client certificates?

Can PAN device publish client certificates?

Re: Packet capture of specific Security Rule?

Re: Packet capture of specific Security Rule?

Re: HA PORT CONFIGURATION IN 4.1.12?

Re: GP with Host detetion and auto-connect

Re: Palo Alto blocking Wii game

Re: missing block-url response page

Re: Does the PAN User-ID Agent 3.1.X work with window 2008 server DC?

Re: I don't know how to set zone protection

Re: Migration cisco asa to pan os ?

Re: Anyone knows good test resource for spyware detection?

Nebula Beta

Unlock your full community experience!

About emr_1