This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences

About gsamuels

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
gsamuels
‎08-12-2019
since ‎05-01-2009
L3 Networker
User Activity
User Profile
Latest posts by gsamuels
View All
My Liked Posts
View All
User Badges
Community Statistics
Member Since ‎05-01-2009 12:27 PM
Date Last Visited ‎08-12-2019 01:19 AM
Posts 53
Total Likes Received 24

Re: Packet flow question

by in General Topics
‎03-22-2011 06:38 PM
‎03-22-2011 06:38 PM
We suggest confirming the routing on the remote side of the vpn, however this does not explain why this is failing intermittently. This may require further investigation, you may need to open a case with support. ... View more

Re: Custom App with Dynamic

by in General Topics
‎03-22-2011 06:35 PM
1 Kudo
‎03-22-2011 06:35 PM
1 Kudo
Configuring application overide policy bypasses the application ID engine on the PAN, thus making it a port based application. The setting 'Application Default' uses the ports defined by the application engine which you are now bypassing, therefore it would not apply in this case. The ovveride policy should only apply for that source destination and port range specified. ... View more

Re: How do I monitor how much of the IPS cpu is being consumed?

by in General Topics
‎01-14-2011 08:17 PM
‎01-14-2011 08:17 PM
The closest thing to what you are looking is the cli command 'show running  resource-monitor' this will give the cpu utilization per core' , all dataplane traffic is load shared among the cores listed. Look for the CPU load(%) status. ... View more

Re: Windows based file shares - what applications?

by in General Topics
‎01-13-2011 06:45 PM
1 Kudo
‎01-13-2011 06:45 PM
1 Kudo
Best practice would be to temporarily allow any application on this policy at which point the traffic log should indicate all applications required to allow the the remote disk share. ... View more

Re: Has anyone had backup exec issues accross the PA?

by in General Topics
‎01-13-2011 06:40 PM
‎01-13-2011 06:40 PM
Hi, If you have reviewed the the traffic and threat logs logs for deny's we may need to take a closer look at the traffic. Regards, Gary S. ... View more

Re: Block Outbound SSTP (Secure Socket Tunneling Protocol)

by in General Topics
‎01-13-2011 06:33 PM
‎01-13-2011 06:33 PM
Hi, I do not see any reference to this application signature for sstp , keep in mind we would only be able to Identify this if there was an ssl decrypt policy on the PAN device. You could submit an application signature request to support, this would allow a complete investigation. Regards, Gary S. ... View more

Re: Transcribing Yara Signatures for PA Custom Threat Signatures

by in General Topics
‎01-11-2011 06:50 PM
‎01-11-2011 06:50 PM
Hi, You would have to submit this description to support for conformation against our archives. Regards, Gary S. ... View more

Re: Ignore Group vs Ignore ignore_user_list.txt

by in General Topics
‎01-11-2011 06:47 PM
1 Kudo
‎01-11-2011 06:47 PM
1 Kudo
Hello, Ignore_ user_list will not provide user-ip association to PAN firewall 'Ignore Group' will not provide group information but will still pass user - ip association. Regards, Gary S. ... View more

Re: SSL-VPN: Unable to receive vpn status from service

by in General Topics
‎01-10-2011 07:42 PM
‎01-10-2011 07:42 PM
Hi, There are no known issues with Mac OSX version 10.6.6, please confirm this device is not running any additional antivirus or firwall settings as this has been the most common cause of ssl connectivity issues. Regards, Gary S. ... View more

Re: Panorama install - VMware ESX 4.0 SCSI Controller selection

by in General Topics
‎10-29-2010 05:16 PM
‎10-29-2010 05:16 PM
Hello, We only support 'Buslogic Parallel '. Regards, Gary S. ... View more

Re: SSL VPN and RADIUS

by in General Topics
‎10-27-2010 07:05 PM
‎10-27-2010 07:05 PM
The key is to determine if radius server is communicating with PAN when user attempts to authenticate. Regarding QOS This doc should walk thru configuring and testing qos https://live.paloaltonetworks.com/docs/DOC-1162 If you require more information please open a case with support to walk thru your config. Regards, Gary S. ... View more

Re: How to use "Retrieve User Group" feature in RADIUS profile?

by in General Topics
‎10-27-2010 06:52 PM
‎10-27-2010 06:52 PM
In order to use AD groups in security policies you will have to forward the group information from the Pan-agent to the Pan firewall using the Filter Group Members setting on the Pan-Agent gui ... View more

Re: Zone Protection Setting

by in General Topics
‎10-26-2010 06:56 PM
1 Kudo
‎10-26-2010 06:56 PM
1 Kudo
Hello, Unfortunately other than the default settings which are very loose you will have to baseline the customers traffic levels to ideally  tune zone protection. Regards, Gary S ... View more

Re: SSL VPN and RADIUS

by in General Topics
‎10-26-2010 06:36 PM
1 Kudo
‎10-26-2010 06:36 PM
1 Kudo
Yes we can QOS the ssl-vpn traffic, as it is based on the egress zone ... View more

Re: Wildcard Cert Import

by in General Topics
‎10-26-2010 06:18 PM
‎10-26-2010 06:18 PM
We do require the pass phrase in order to import certificate. ... View more
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎08-12-2019 01:19 AM
Latest Tags
No tags yet
Likes From
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks