About ghostrider

ghostrider · ‎11-07-2016

Thank you!

ghostrider · ‎11-07-2016

thanks !

ghostrider · ‎11-07-2016

Hello I am not able to see the configuration option under logs. May be I do not have permission? I need to see the exact commands that user run

ghostrider · ‎11-06-2016

I just tried and work perfectly! You are the man !

pulukas · ‎11-06-2016

If your ISP is routing the subnet to your PA interface as the next hop, then no proxy-arp will be needed. If your ISP has added the second subnet to their interface and given you a second gateway address, then you need to add an address in this subnet and mask to your interface. Then the necessary proxy arp will be created when you add the NAT rules.

ghostrider · ‎11-05-2016

thank you

ghostrider · ‎11-05-2016

thank you

ghostrider · ‎11-05-2016

thanks But I am not able to understand that destination NAT happens before security policy so in security policy, we should use the post-nated address (private address) but we use the original public address?

ghostrider · ‎11-05-2016

Any one here for IKEV2 explaination?

ghostrider · ‎10-29-2016

Hello Is there any one? how we can do the failover of VPN other than running dynamic routing protocol over IPSEC VPN like feature DPD and VPN monitoring with Cisco?

ghostrider · ‎10-29-2016

Thank you

kiwi · ‎10-28-2016

Hi, I believe the video here explains your scenario exactly : How to Configure U-Turn NAT Cheers ! -Kim.

ghostrider · ‎10-28-2016

Thank you

Brandon_Wertz · ‎10-28-2016

It's my understanding that zero proxy-ids are necessary for a PA-PA VPN connection. the PA leverages the routing in your VR to define what traffic brings up your tunnel.

ghostrider · ‎10-26-2016

Hello But how PA is able to recognize the fb-base although its also encrypted? through certificate name in SSL hello exchange after tcp connection? In this case PA will not be able to recognize my application because its name is https://myintranet. Am I right?

Member Since	‎04-24-2016 01:08 AM
Date Last Visited
Posts	136
Total Likes Received	1

About ghostrider

Re: Template and Devcie Group Design

Re: Template and Devcie Group Design

Re: debug flow does not show NAT and threat related drop information

Template and Devcie Group Design

debug flow does not show NAT and threat related drop information

Re: copy production panorama policies to lab panorama

Re: unknown-tcp and web application

Re: Best Practice policy 7.1

Re: Applications for Internet web browsing?

Applications for Internet web browsing?

Re: Panorama Audit Logs

Re: Template and Devcie Group Design

Re: debug flow does not show NAT and threat related drop information

Re: Applications for Internet web browsing?

Re: Hardening the security rule for service ports

Re: unknown-tcp and web application

Re: Filtering the security rules by rule number

Re: IP for portal and gateway in global protect

Re: Panorama Audit Logs

Re: Copying firewall rules from one firewall to toher

Re: IP address for NAT

Re: PA support point to multipoint IPSEC VPN?

Re: Static bidirectional NAT or soruce/destination NAT

Re: Security policy and NAT - zone direction

Re: Proxy id between Palo Alto firewall and Cisco ASA

Re: Redundant IPSEC VPN with cisco and VPN monitor

Re: IPSEC VPN negotiation without traffic

Re: Order of different NAT

Re: Destination NAT or Static NAT

Re: Proxy ID in SA?

Re: App-ID with encrypted sharepoint app

Unlock your full community experience!

About ghostrider