About VinceM

VinceM · ‎11-25-2013

Hi, Agree with Kadak but you can also enable "pre source NAT adress / Post NAT source adress" and "pre destination NAT adress / Post destination NAT adress" colum in monitor traffic page. And in this case, with no CLI, you have all info. Hoipe help Vincent

VinceM · ‎11-25-2013

Hi all, Having a paloalto with multiple VR and subnet overlapping ( having multiple interfaces / Sub witth same subnet). EX: Int1 - IP: 10.1.1.1/24 - VR1 Int2 - IP: 10.1.1.1/24 - VR2 ..... It works but does anybody knoes how: For management services, specify one VR or another. You can choose per IP but not per VR / Interface ? For making a ping in cli, specify as argument which is the source VR ? Because you can specify source IP but not VR. Thx for your help. Rgds V.

VinceM · ‎11-21-2013

Hi, Here extract from training 🙂 Hope help.

VinceM · ‎11-18-2013

Hi efellows, As you write in your question, in Vwire, plao has no IP on interface. Mean it's fully transparent. No routing not NAT no ..... just TRANSPARENT, this is the aim for transparent mode. For some reason, some feature can be supported in this mode like NAT ... but it's really particular need and not very clean deployment. Please see: https://live.paloaltonetworks.com/docs/DOC-5725 Hope help V.

VinceM · ‎11-15-2013

Hi, Maybe you can use the mangement interface for that. Hope help V.

VinceM · ‎11-15-2013

Hi, Sometime this issue happen when database is running out of memory. try to reset your log. In parallel restart you rmanegemnt server with: debug software restart management-server Hope help. v.

VinceM · ‎11-12-2013

Hi, For me no issue with GP config based on Portal + gateway on L3 interface in DHCP client mode. Please follow the "Quick start Guide Global Protect V2". Hope help rgds

VinceM · ‎11-06-2013

Hi, Seem to be an issue to due new certificate used in Youtube following Google integration. As all these app are in HTTPS, App ID is based on certificates Made lot of test and always been miss classified 😞 V.

VinceM · ‎10-28-2013

Hi, Captiv Portal policies can't be scheduled then they will be prompted everytime. Yes, one acccount can be used on many devices. Rgds V.

VinceM · ‎10-28-2013

Hi, Please look on: https://live.paloaltonetworks.com/docs/DOC-3938 Does it make sense for your archie ? Hope help. V.

VinceM · ‎10-27-2013

HI, Fro me two things: - Or you want to use Management interface for updating your palo and this traffic go through the palo himself then, you need to create policy allowing taffic from management ip to dns named object " updates.paloaltonetworks.com" and pan-update app on Https - Or you enable the palo update from your outside interface and in this case just keep in ming to allow traffic from your outside zone to outside zone (Traffic denied automatically as soon as you create a deny all policy). Hope Help V.

VinceM · ‎10-21-2013

Hi, Can you explain what you would like to see with this import in the PA ? There is already many tools in WireShark for showing all info in graphic mode. Look on http://www.wireshark.org/ Hope help. v.

VinceM · ‎10-21-2013

Hi Gururaj, Had the same issue couple of month ago and it seem that changing the mapped var inthe UID is not possible, it only be able to use the login ID. Maybe it change but it was like that for me. If someone have more info ... correct me. Hope help. V.

VinceM · ‎10-17-2013

Hi Infotech, Normally your reseller should be able to drive you in this migration (with the migration tool, advice, best practice ....). The tool will not do everything but can help. If your reseller can't, contact your local palo SE and ask for pro services. Just keep in mind that this migration will change your life ... in the good way 🙂 Hope help V.

VinceM · ‎09-19-2013

Hi all, Installing a palo on network with VCSExpressway (cisco ToIP) module. After reading other discussion (https://live.paloaltonetworks.com/message/7757#7757, https://live.paloaltonetworks.com/message/12132#12132, , for a "full" compatibility between palo and VCS, we have to create app override for disabling the app L7 PA's analyse (for NAT reason). The Cisco argue is our VCS know perfectly H323 and SIP, more than your fw which is just a FW ... Does anybody have feedback about this archietecture ? what is for you the best practice, disbaling L7 on palo or disabling NAT on VCS ? If you have create App overide please can you explain which rule you have create. Thx for your help V.

Member Since	‎08-27-2010 06:32 AM
Date Last Visited	‎12-01-2025 07:35 AM
Posts	451
Total Likes Received	124

Online Status	Offline
Date Last Visited	‎12-01-2025 07:35 AM

About VinceM

Re: Please tell me about the maximum number of sites that each Remote Network SPN can accommodate.

Re: Allow download no upload

Re: DNS not resolving through Prisma Access for a particular domain

Re: Commit Warning for Antispyware

Re: Commit Warning for Antispyware

Re: User-ID Agent - [Error 115]: Cannot open security log for DC..

Re: Dataplane goes restarted

Re: Dataplane goes restarted

Re: infrastructure subnet sizing prisma access ?

Re: Dataplane goes restarted

Re: Please tell me about the maximum number of sites that each Remote Network SPN can accommodate.

Re: Allow download no upload

Re: Commit Warning for Antispyware

Re: Request for Palo Alto PSE Strata Prof. clarification

Re: Panorama via S2S VPN

Re: Which model is the rack mount kit for the PA-510?

Re: Global Protect

Re: Global protect client for windows 11

Re: session per second

Re: Two Site to Site VPNs with the same external subnet.

How Do I Know if Traffic Is Hitting a Decryption Policy?

Re: NAT sessions

Using Virtual Router

Re: Limitations in virtual wire mode?

Re: Limitations in virtual wire mode?

Re: URL Filtering in Vwire SSL Trust Question

Re: High Management CPU

Re: PA-200 with DHCP assigned Internet IP and GlobalProtect using self signed certs

Re: youtube not working because recognized as google-video-base

Re: Scheduled captive portal and byod..

Re: Detailed troubleshooting of drop counters

Re: Palo Alto Software/Threat/AntiVirus Update Policy

Re: Is it possible to import logs from wireshark or ethreal and view in the PaloAlto?

Re: Is it possible to fetch UPN (universal principle name) from AD using User ID agent instead of login name?

Re: Migration from ASA 5510 to PA 3020

PaloAlto and VCS gateway - H323 / SIP

Equinox Beta

Seattle Beta

Unlock your full community experience!

About VinceM