This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences

About emr_1

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
emr_1
‎04-17-2024
since ‎05-10-2010
L5 Sessionator
User Activity
User Profile
Latest posts by emr_1
View All
User Badges
Community Statistics
Member Since ‎05-10-2010 06:49 PM
Date Last Visited ‎04-17-2024 12:52 AM
Posts 307
Total Likes Received 98

Re: SSL VPN with Global Protect Agent 1.2.0 on different port

by in General Topics
‎08-22-2013 05:47 AM
‎08-22-2013 05:47 AM
If you are talking about bug#50133, it was fixed on v5.0.6. 50133—When configuring a GlobalProtect portal and adding an external gateway address for GlobalProtect clients, the IP format ip-address:port could not be added. Update made to allow this format. Regards ... View more

Re: Re: Skype false positive

by in General Topics
‎08-22-2013 04:35 AM
1 Kudo
‎08-22-2013 04:35 AM
1 Kudo
If the user is using skype client, you can find skype-probe in traffic log as below: I can see all URLs you mentioned. (URL category name might be different from you because I'm using PAN-DB instead of BrightCloud) What is 'users log' you are pointing to? Do you mean detail log for 'secure.skype.com'? ... View more

Re: Re: Skype false positive

by in General Topics
‎08-22-2013 02:56 AM
1 Kudo
‎08-22-2013 02:56 AM
1 Kudo
Hi The URL log as below is generated by accessing to secure.skype.com from IE10. Do you mean you can't figure out this is actual skype session or just https session from browser? If my understanding is correct, I guess there is no clue to figure out which pattern is it because the session is encrypted by ssl and PaloAlto device could not see the payload. However, skype client send out skype-probe session, if you can see skype and skype-probe from one source address, you might be able to say that user is using skype client. Regards ... View more

Re: How to use Wildfire for Android APK

by in General Topics
‎08-20-2013 05:38 AM
‎08-20-2013 05:38 AM
Hi achitwadgi, I see. It helps me to understand more clearly. Thanks for the updates. ... View more

Re: acc top source destination

by in General Topics
‎08-20-2013 05:23 AM
‎08-20-2013 05:23 AM
Hi, That is expected result and normal. Please refer to following KB: ACC Shows Different Results After Clearing Filters Regards ... View more

Re: How to use Wildfire for Android APK

by in General Topics
‎08-20-2013 05:20 AM
‎08-20-2013 05:20 AM
Thank you for your replies, guys. I tested with my PA device. As VinceM says, I confirmed PA did not upload the APK file at this point. I think this is new feature available from 6.0. ... View more

How to use Wildfire for Android APK

by in General Topics
‎08-19-2013 10:34 PM
‎08-19-2013 10:34 PM
I found following new press release: Palo Alto Networks WildFire Protects Against Cyber Threats Targeting Android Smartphones and Tablets I have PaloAlto device with Wildfire subscription. The device is running on PANOS 5.0.6. How can I use this new wildfire? Does it mean I just change configuration of File Blocking to upload .apk files? If someone knows, please help. Otherwise, I'll contact to my local SE. Regards, Emr ... View more
Labels:

Re: Policy with "Log at Session Start" option - how to find it?

by in General Topics
‎07-23-2013 01:08 AM
‎07-23-2013 01:08 AM
I don't know there is any document related to this filter, but I found this filter from PaloAlto API browser and debug for web browser. You can access to API browser by typing in https://<IP address for MGT>/api/ For debug, you can access to https://<IP address for MGT>/debug Regards, ... View more

Re: Policy with "Log at Session Start" option - how to find it?

by in General Topics
‎07-22-2013 07:16 PM
2 Kudos
‎07-22-2013 07:16 PM
2 Kudos
Hello, Please use following filter in security rule page (on GUI). (log-start eq 'yes') You can change log storage allocation under device tab > setup > management tab > logging and reporting settings please click edit button on the right upper corner. Regards, ... View more

Re: Licence problem with Iphone/Android GlobalProtect client

by in General Topics
‎07-19-2013 02:25 AM
‎07-19-2013 02:25 AM
That's as expected. You need GP-Gateway license for Android and iOS. You can find license information in following document. (page 3) Regards, ... View more

Can PAN detect this kind of malware?

by in General Topics
‎07-17-2013 08:17 AM
‎07-17-2013 08:17 AM
I found following article. Sucuri Research This is pretty interesting technique, though if people hits this kind of malware, is Threat Prevention (or might be wildfire?) able to detect this malware? Regards, ... View more
Labels:

Re: permitting/denying asymetric TCP flows at the VYSY level?

by in General Topics
‎07-08-2013 06:34 PM
‎07-08-2013 06:34 PM
How about zone level? You can configure it under zone protection configuration. Regards ... View more

Re: Can PAN device publish client certificates?

by in General Topics
‎06-26-2013 07:11 AM
‎06-26-2013 07:11 AM
Hi Thank you for your reply. I could generate client cert and successfully auth'ed by client certificate. I have one more question. I generated two certs, and confirmed both certs works fine. Afterward, I revoked one cert, though I can still login to GP Portal using user002. Doesn't it revoke just after I hit 'revoke' from GUI? (I mean do I need to wait few minutes? hours?) Do you have any idea? Regards ... View more

Can PAN device publish client certificates?

by in General Topics
‎06-26-2013 02:40 AM
‎06-26-2013 02:40 AM
I made 5 users into LocalDB, and I configured GlobalProtect Portal & Gateway. It works fine so far. Now I want to generate 5 client certificates for each user and use Client Cert Profile and Local DB as two factor auth. when I connect to GP. My PANOS is 5.0. Is it possible to publish client certs? I could confirm I can configure CA under Device tab > Certificate Management > Certificates. But I think I CANNOT generate client certs using this CA. If I'm wrong, please correct me and tell me how to. If I'm correct, I'll prepare Windows 2008 or 2012 server for CA and client certs. Regards, Emr ... View more

Re: Packet capture of specific Security Rule?

by in General Topics
‎06-20-2013 08:59 AM
‎06-20-2013 08:59 AM
I found one command that might help you...I hope. try 'set application dump on rule <rulename> protocol 17 destination-port 53' you can see green down arrow besides each traffic log after you enter this command I just mention that if I enter 'set application dump on rule <rulename>', my PAN device somehow collected pcaps for all traffics. I think only rulename does not work properly. ***Additional Comments*** I confirmed that rulename filter does not work even I specify protocol number and destination number. This command would not help you. I apologize for it. ... View more
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎04-17-2024 12:52 AM
Latest Tags
No tags yet
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks