About VinceM

VinceM · ‎06-05-2013

Either something is blocked between manegemnt and remote agent (something in logs ?) or it's a bug then contact your local SE. V.

VinceM · ‎06-05-2013

Please run show user user-id-agent state Name-Agent show user user-id-agent statistics V.

VinceM · ‎06-05-2013

sure that communication on port 5008 is possible from management interface on the palo and your remote AD ? No FW on the AD ? Which Pa model ? Which version on the PA ? Which version on the agent ? V.

VinceM · ‎06-05-2013

Hi, no, just in both palo (device / User Identification / User-IDAgent) and on each agent, just the comunication port. No change on the AD V.

VinceM · ‎06-05-2013

Hi, Try to configure different port for each agent on your palo AD1 - port 5007 AD2 - port 5008 AD3 - port 5009 and of course be sure that your palo is able to contact each of your agent 🙂 through the management interface by default Should solve your issue V.

VinceM · ‎06-05-2013

Hi all, I am not really in touch with API or thing like that, maybe someone can help 🙂 I am using wget command and API for backuping my palo config. It works .... But how can I do if I would like to re upload this config to another palo ? think there is a wput commande but ... if someone have an exemple .... V.

VinceM · ‎06-05-2013

Algo for doing what ?

VinceM · ‎06-05-2013

Hi, Just tag your rule. and use the research bar for filtering. the ad is you can have one rule member of many goups. Exemple, you rule from mail server to dma relay can be member of all : Mail and linux and hosting groups in same time . Thing that you can't do with just "normal" grouping. V.

VinceM · ‎06-04-2013

Hi, For routing ... none of them, your interface addresse will never appear in the routing stuff. For NAT, depend wich IP you have selected in the Policy NAT rule. "Normally" (don't like this word) you don't need to configure multiple IP adress on your outside interface, if you've got a router connected on it, with gratuitous arp, all your traffic should be redirected to your outside fw interface. Exept if second IP will be used for: GP portal / Gateway IP for nating V.

VinceM · ‎06-04-2013

Two thing, forst, for your next hop, traceroute command eexiste in the palo and you can specify many parameters. Concerning your VR, of course you can't specify in a VR an outgoing gateway interface which is not part of the same VR. - Use VLan on Eth1/3 interface each sub part of a dedicate VR (Trust-VR / Untrust-VR) - Specify another VR as gateway. V.

VinceM · ‎06-04-2013

Hi, Just keep in mind that two portal mean 2 public IPs, cant split portal like https:www.mycompany/portal1 and https:www.mycompany/portal2 V.

VinceM · ‎06-04-2013

Hi, For testing, try with the commande : test routing fib-lookup ip X.X.X.X virtual-router VRName V.

VinceM · ‎06-03-2013

Hi, Know that in some version, there is a bug wich not allow to send reponse page if tarffic is https. What is your version ? Try to upgrade to last one either 5.0.5 or 4.1.12 V.

VinceM · ‎06-03-2013

Hi, I met this issue many time during POC, the main reason in my case is, for the first request to an uncategorize web site, the palo send the request to cloud and wait time for an answer. If the answer is not received during this period, URL is taggued as unknown. For sure the answer will be received a little bit latter. Then either the second request or the test in CLI works well 🙂 The best solution should be to increase this time-out throught the command: set deviceconfig setting ctd url-wait-timeout. Please test and let me know. V.

VinceM · ‎06-03-2013

Hi, Command need to verify if the cert have been excluded: show system setting ssl-decrypt exclude-cache with reason: App_unsupported Cert_Unsupported SSL_Unsupported Refer to this docs can help 🙂 =>https://live.paloaltonetworks.com/docs/DOC-1423 V.

Member Since	‎08-27-2010 06:32 AM
Date Last Visited	‎11-11-2025 11:30 PM
Posts	451
Total Likes Received	124

Online Status	Offline
Date Last Visited	‎11-11-2025 11:30 PM

About VinceM

Re: Please tell me about the maximum number of sites that each Remote Network SPN can accommodate.

Re: Allow download no upload

Re: DNS not resolving through Prisma Access for a particular domain

Re: Commit Warning for Antispyware

Re: Commit Warning for Antispyware

Re: User-ID Agent - [Error 115]: Cannot open security log for DC..

Re: Dataplane goes restarted

Re: Dataplane goes restarted

Re: infrastructure subnet sizing prisma access ?

Re: Dataplane goes restarted

Re: Please tell me about the maximum number of sites that each Remote Network SPN can accommodate.

Re: Allow download no upload

Re: Commit Warning for Antispyware

Re: Request for Palo Alto PSE Strata Prof. clarification

Re: Panorama via S2S VPN

Re: Which model is the rack mount kit for the PA-510?

Re: Global Protect

Re: Global protect client for windows 11

Re: session per second

Re: Two Site to Site VPNs with the same external subnet.

How Do I Know if Traffic Is Hitting a Decryption Policy?

Re: User ID agents showing as red

Re: User ID agents showing as red

Re: User ID agents showing as red

Re: User ID agents showing as red

Re: User ID agents showing as red

Upload Config to Palo with API

Re: GlobalProtect algorithms

Re: Security Policy Organization

Re: Multiple IP addresses on an interface

Re: Route checking using CLI issue ?

Re: Global Protect with multiple portals

Re: Route checking using CLI issue ?

Re: missing block-url response page

Re: URL resolving to unknown while know on brightcloud

Re: Current situation with Dropbox?

Equinox Beta

Seattle Beta

Unlock your full community experience!

About VinceM