About MemphisBrothers

MemphisBrothers · ‎11-18-2013

I have an internal licenses server that users need to access from the internet, 10.1.3.21. The The external exposed ip is 216.55.55.10 The application on the users computer needs the following TCP ports open through the firewall so that client workstations are able to obtain a license from your license server system. lmgrd.exe needs INCOMING TCP ports 27000 to 27009 and adskflex.exe needs 2080. What is the easiest way to address this? We need a natting rule correct? What type. Once I figure out the natting rule then I can created policies to allow application traffic on the necessary ports. Unless there is an exev simpler way to create it all. Ideas welcome

MemphisBrothers · ‎06-06-2013

Yes I need to see the offending user IP and there is no variable for that if the user exits. Anyone know

MemphisBrothers · ‎05-08-2013

All due respect to you, it may work in your lab. But that is the first way we tested it in our real world environment and it did not stop students from accessing the site. All recommendations are appreciated.

MemphisBrothers · ‎05-08-2013

Dude, really. You don't think I have tried that? It does not work. I did find a clever way to stop it. Go to Objects -> Regions. Add a new one and name it whatever (I called it Viooz_Lithuania for testing). Put 5.199.170.104 as the IP address for the region. Then, go to Policies -> Security and create a new security policy. I named it Block_Viooz. The rule looks like this: Source Zone: Trust (LAN) Source Address: Any Source User: Any HIP Profile: Any Destination Zone: Untrust (ISP) Destination Address: choose the Region you created (Viooz_Lithuania for me) Destination Application: Any Destination Service: Any Action: Deny Profile: None I set this rule near the top of the list, and then when trying to browse to http://viooz.co, I got page cannot be displayed, and a Deny entry logged in my Traffic Log.

MemphisBrothers · ‎05-07-2013

Brightcloud has it as an entertainment category. It should also be streaming media and illegal. I have requested a change.

MemphisBrothers · ‎05-07-2013

This is an illegal movie site that shows anything even stolen movies for free. The IP address is 5.199.170.104 I have tried blocking the site name, the ip. Nothing works. It's almost like the site is an anonymizer itself. I would love any help at all. I need to totally block this site from our network. I have redundant PA-500s.

MemphisBrothers · ‎04-29-2013

We are a private high school with a growing laptop population but these kids work hard trying to circumvent our security. They have found using 3rd party VPN tools, mostly single exe's they hide in their recucle bin when they fear exposure. This tool comes with statements telling the user it is illegal and it will get them around the "best security systems your school has". How can I detect and prevent this type of process from running on our network.

MemphisBrothers · ‎03-21-2013

I urge Palo Alto to address this as soon as possible. I am the Network Admin for a private HS we could really use it. We deployed laptops to freshmen and have NO books. Our entire delivery system is through the device. Teachers use Youtube extensivly but students abuse the privelage. Currently I have to block Youtube for all stuidents and have teachers run the videos on the projector for in class and students access youtube from home openly. Makes it hard for the journalism and broadcasting classes.

MemphisBrothers · ‎03-07-2013

It is a step. We have Spring Break coming up. Perfect time to re design the policies. I'll start with the Scorched earth policy and open from there.

MemphisBrothers · ‎03-07-2013

I just got into the PA this past year. Would you mind sharing how you set up the SSL Decryption with our school?

MemphisBrothers · ‎03-05-2013

They tell me at least by the 3rd week of March.

MemphisBrothers · ‎03-05-2013

I am currently managing users via AD groups but need a more granular approach. I recently added a BYOD device manager to my network. It divides my 2 main groups using a specific IP range. If I use this method to manage users I will probably have to reset all my policies. My question is should I start by blocking all processes then open just what we need. Which rule should go first? I have Students and faculy-Staff Faculty-Staff can have network access, printers etc. social media, streaming media, Netflix etc Students with Auth machines can have network share access No Social Media, games, (all the usual blocks) limited (QOS) streaming media, no Netflix, Hulu TV. What rules should I start with

MemphisBrothers · ‎03-05-2013

Second that

MemphisBrothers · ‎03-05-2013

Confirmed all of the above. I fixed the problem and no one even touched on it. Reverse DNS look-up. If you use Windows DNS you have to make sure there is a reverse DNS look-up for the designated IP addresses. Once I set that us the data started filtering in slowly but surely. Riddle solved folks.

MemphisBrothers · ‎03-05-2013

Definitely not! There is a bug in 5.02. I had to roll mine back. The bug caused the device CPU to hit 100% after a day or two and the only fix is restarting the management console. The after effect there caused me to restart my device. I am told by support that 5.03 has a fix for all that.

Member Since	‎07-21-2012 04:31 PM
Date Last Visited	‎06-20-2017 02:58 PM
Posts	60
Total Likes Received	11

Online Status	Offline
Date Last Visited	‎06-20-2017 02:58 PM

About MemphisBrothers

Is there a Palo Alto update the NCAA-Flash, -MML and -Video applications for 2016?

How can I add multiple IP Ranges to one Address Object

Re: NCAA March Madness 2015

Re: Is anyone using the Aruba Clearpass device to identify user and machine name information?

Re: Is anyone using the Aruba Clearpass device to identify user and machine name information?

Is anyone using the Aruba Clearpass device to identify user and machine name information?

Re: Entries in My System Logs

Entries in My System Logs

Need CLI help

Re: How can I export my Applications list in a given profile.

Re: Is anyone using the Aruba Clearpass device to identify user and machine name information?

Re: Application Still showing up after removal from Security Rule

Re: How can I export my Applications list in a given profile.

Re: Youtube Edu

Is anyone using the Aruba Clearpass device to identify user and machine name information?

Re: Methods for creating security policies

Re: Methods for creating security policies

What type of policy\rules do you need to access an internal licenses server from the internet

Re: What are the available variables for response pages?

Re: Cannot block site viooz.co

Re: Cannot block site viooz.co

Re: Cannot block site viooz.co

Cannot block site viooz.co

How can I detect and stop 3rd party VPN tools used to bypass my network security

Re: Youtube Edu

Re: Re-evaluating current structure

Re: Students, using HTTPS now on Proxies

Re: PANOS 4.1 vs 5.0

Re-evaluating current structure

Re: PANOS 4.1 vs 5.0

Re: I extended an IP Range and now I cannot see those user-ids in the monitor.

Re: PANOS 4.1 vs 5.0

Unlock your full community experience!

About MemphisBrothers