This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences

About MohamedSharief

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
MohamedSharief
‎09-10-2019
since ‎09-20-2016
L4 Transporter
User Activity
User Profile
Latest posts by MohamedSharief
View All
User Badges
Community Statistics
Member Since ‎09-20-2016 11:10 PM
Date Last Visited ‎09-10-2019 06:32 AM
Posts 105
Total Likes Received 18

Re: Certificate error when accessing Gmail using SSL Decryption

by in General Topics
‎10-31-2016 06:28 AM
‎10-31-2016 06:28 AM
No, only in Chrome and only when accessing Gmail. The error message is "your connection is not secure". ... View more

Re: Certificate error when accessing Gmail using SSL Decryption

by in General Topics
‎10-31-2016 05:18 AM
‎10-31-2016 05:18 AM
Update: -Chrome has been updated to latest version. -Reset the certificate cache using: debug dataplane reset ssl-decrypt certificate-cache   Still the same issue. ... View more

Re: Can't seem to connect to Cisco ASA

by in General Topics
‎10-31-2016 05:07 AM
‎10-31-2016 05:07 AM
Try using 3des instead of aes-256-cbc and make sure its the same on ASA side. I got this issue recently and when changed to 3des phase1 was up.   Regards, Sharief ... View more

Certificate error when accessing Gmail using SSL Decryption

by in General Topics
‎10-31-2016 04:59 AM
1 Kudo
‎10-31-2016 04:59 AM
1 Kudo
Hi,   I've implemented SSL Decryption in our environment and it worked find for most of the domains but "sometimes" when we access Gmail using Chrome it will give us a certificate error.   We are using internal CA and the Root certificate was distributed to all machines using GPO. I checked the trusted CA on Chrome and the certificate was there, deleted it and imported it manually and still the same error. Using IE, gmail is accessible but really slow.   When I stop SSL Decryption policy gmail is accessible.   No URLs were specified in the URL tab of the policy.   Is this behavior might be because we implemented User-ID recently? Mapping still not stable and we are getting some sources as Unknown.   Kindly let me know if you have any ideas. ... View more

Re: Naming convention for security policies and address objects/services

by in General Topics
‎10-23-2016 05:05 AM
‎10-23-2016 05:05 AM
Hi,   I'm currently using Allow/Deny-SourceZone-DestinationZone-Application e.g Allow-Inside-Outside-Skype.   Regards, Sharief ... View more

Re: Decrypt guest network traffic

by in General Topics
‎10-16-2016 10:48 PM
‎10-16-2016 10:48 PM
Useful thread that was. Thank you pulukas. ... View more

Decrypt guest network traffic

by in General Topics
‎10-16-2016 03:00 AM
‎10-16-2016 03:00 AM
Hi,   I'm using SSL decryption for domain users and it works perfectly. However, we're having a guest network (wifi) to provide our guests with internet access but we need to decrypt this traffic also. Any suggestion how to do this without forcing the guest to install the certificate? Can I use captive portal to decrypt the guest traffic?   I'm opened for any kind of implementations just to decrypt the traffic.   Regards, Sharief ... View more

Re: Skype is not working with allow rule

by in General Topics
‎10-05-2016 11:38 AM
‎10-05-2016 11:38 AM
Thanks for the help guys. I did the allow all rule with one source and when Skype didnt work we realised its not FW issue. However, we pluged the machine directly with the router towards the internet and it didn't work also, then we change the DNS to public on (8.8.8.8) and everything was working perfectly. They have an issue with their DNS server. ... View more

Re: Skype is not working with allow rule

by in General Topics
‎10-04-2016 05:43 AM
‎10-04-2016 05:43 AM
I will try that Terje. When I added the policy "any any" today and commit the changes I got a warning that msn-base, ssl and web-browsing should be allowed as dependency apps also, but when I checked in https://applipedia.paloaltonetworks.com/ its not required. To double check this I shoot the command #show predefined application skype and those dependency apps were included. But again I've already tried and added them and still doesn't work. ... View more

Re: Skype is not working with allow rule

by in General Topics
‎10-04-2016 12:01 AM
‎10-04-2016 12:01 AM
I've created "any to any" policy where the source address is the engineer's laptop, then added skype, skype-probe and unkown-udb to the list of applications and committed the changes. This time I got a warning that to enable skype I must add msn-base, ssl and web-browsing. I committed without adding those then tried but failed, then I added apps in warning but still doesn't work. When I checked the logs again I got on start session n/a as session end reason and on end session tcp-rst-from-client & tcp-fin as session end reasons.   Any idea on whats going on guys? ... View more

Re: Skype is not working with allow rule

by in General Topics
‎10-03-2016 11:24 AM
‎10-03-2016 11:24 AM
Great idea BPry. I'll make sure to implement that tomorrow. Thanks ... View more

Re: Skype is not working with allow rule

by in General Topics
‎10-03-2016 07:13 AM
‎10-03-2016 07:13 AM
Aaaaaand its still not working. Even when we added the unknown-udp to the policy.   In the traffic log I noticed when the type is "end" the session end reason is either "tcp-rst-from-client" or "tcp-fin" but when the type is start the session end reason is always n/a. ... View more

Re: Skype is not working with allow rule

by in General Topics
‎10-03-2016 06:56 AM
‎10-03-2016 06:56 AM
I've already thought about adding unknown-udp to the policy and infomred the client to made the changes. Waiting his reply now. ... View more

Re: Skype is not working with allow rule

by in General Topics
‎10-03-2016 06:26 AM
‎10-03-2016 06:26 AM
Traffic is hitting the same rule created for Skype as mentioned in traffic log. The rule I've created is located in the top of the policies. The weird thing is skype is not even allowing me to enter a username and password, the front page of skype never displayed, it will just start loading then "check your internet connection" will pops up. ... View more

Re: Skype is not working with allow rule

by in General Topics
‎10-03-2016 04:07 AM
‎10-03-2016 04:07 AM
1-      Appliance Model: PA-500 2-      PAN-OS version: 7.1.3 3-      Applications Version: 599-3443 ... View more
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎09-10-2019 06:32 AM
Latest Tags
Likes Given To
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks