About VinceM

VinceM · ‎05-30-2013

Best one should be L2 interfaces, mean palo will be "transparent " then no routing Else, L3 interfaces with sub per vlan. V.

VinceM · ‎05-30-2013

Hi, Best thing if don't know the syntax can be to use the "filter add" option - small + on the top righ corner in Monitor/traffic. V.

VinceM · ‎05-30-2013

Hi, Just keep in mind that both of them is submit to license. They you have to buy either Brightcloud or Pan-DB licence. Then moving from one to the other is only possible on the renew date. Switching more often can be possible only: If you have demo Palo (all license inside by default) If you have baugh both license 🙂

VinceM · ‎05-30-2013

Hi, If all info seem to be ok on the agent and be able to see user / IP mapping in then look in the PA: show user ip-user-mapping all Is there any info ? No, mean Pan has no user info in memory => either bug in Pan or communication issue between agent and pan Yes mean mapping is ok. Are you sure that nobody (everybody have a ghost on his network) disable user identification on your Zone ? Rgds V.

VinceM · ‎05-29-2013

Hi, look in software release, the 5.0.5 just arrive and in the RN there is: 49724—Users were experiencing delays connecting to video conferencing applications because the firewall was initially classifying the traffic as unknown-udp and discarding it. This issue was due to an error creating RTP/RTCP predict sessions in cases where the application only announced one of the protocols. Maybe can be good for you ? Rgds V.

VinceM · ‎05-28-2013

Hi, How are the Shotel session in your palo ? Allow / Deny / Incomplete ? Maybe security rule are missing between your VPN zone and either DMZ or LAN ? V.

VinceM · ‎05-28-2013

Hi, Just keep in mind that always the breach is the user. Then just imagine number of re-categorisation received by palo 🙂 Maybe good solution could be to provide user an internal service for re categorize URL, internal validation then submit to palo. Make sense ? Rgds V.

VinceM · ‎05-28-2013

Hi, No, it will be one port per private IP (whatever the destination same or not). Rgds V;

VinceM · ‎05-28-2013

HI, First match your decrytion policies, second, on a traffic log, you can click on small icon on the left and check if your session have been decrypted Rgds

VinceM · ‎05-28-2013

HI, for me ..... no. Either delete nothing or delete everything but nothing else. Easy to say but maybe no easy to do is to configure security policy not to be logged. rgds V.

VinceM · ‎04-08-2013

Hi, No need activate https on interface. Please, first thing, confirm that if you are connected directly on same subnet as you PA's outside interface, portal is OK, if not, should be a SSL issue (maybe comming from cetifiat error depending of the error message). Next step, if it's work, doing the same from outside, work => OK, doesn't, routing issue. rgds V.

VinceM · ‎04-08-2013

Hi, VPN is a L3 feature, if you have same info for remote VPN partner and and remote proxy, mean it's L2 .... strange. Are you sure about your info? If yes, NAT is needed. Rgds V.

VinceM · ‎03-27-2013

Be uploaded to wildfire only PE files. if more than 2 level of compression, file is seen as zip then no PE then no wildfire 🙂 In my mind not able to block file with more than two level of compression. V.

VinceM · ‎05-14-2012

Hi ppatel, Hi will do that. Thanks for time you spend to answered me. rgds V.

VinceM · ‎05-09-2012

Hi, Thanks for your answer. What I would like to be able to have is ths stacked graph in Monitor / threath Monitor and Monitor / traffic Monitor. Sorry for the miss-understaning V.

Member Since	‎08-27-2010 06:32 AM
Date Last Visited	‎09-25-2024 10:44 AM
Posts	444
Total Likes Received	122

Online Status	Offline
Date Last Visited	‎09-25-2024 10:44 AM

About VinceM

Re: DNS not resolving through Prisma Access for a particular domain

Re: Commit Warning for Antispyware

Re: Commit Warning for Antispyware

Re: User-ID Agent - [Error 115]: Cannot open security log for DC..

Re: Dataplane goes restarted

Re: Dataplane goes restarted

Re: infrastructure subnet sizing prisma access ?

Re: Dataplane goes restarted

Re: Panorama via S2S VPN

Re: IP Pool – TTL when IP is allocated?

Re: Commit Warning for Antispyware

Re: Request for Palo Alto PSE Strata Prof. clarification

Re: Panorama via S2S VPN

Re: IPSec VPN only config on VPN Gateway?

Re: Ethernet aggregate group

Re: Global Protect

Re: Global protect client for windows 11

Re: session per second

Re: Two Site to Site VPNs with the same external subnet.

Re: Can i configure duplicate IP's in seperate interaces in seperate VR on a single VSYS or seperate

How Do I Know if Traffic Is Hitting a Decryption Policy?

Re: Cisco - trunk- PA - trunk - Juniper SRX

Re: Is there a list of options / filters I can use in the Web GUI ?

Re: brightcloud vs Paloalto URL DB

Re: User-ID Agent - not populating PAN

Re: Troubleshooting Shotetel Communicator over GlobalProtect

Re: Troubleshooting Shotetel Communicator over GlobalProtect

Re: Custom Response Page - Blocked URL Re-categorization Request

Re: to NAT pool or not

Re: how can I know that traffic is hitting a configured decryption policy ?

Re: Delete some logs

Re: sslvpn 4.0.x issue

Re: VPN tunnel config question

Re: block files with multiple level of compression

Re: Threath Monitor / App Monitor

Re: Threath Monitor / App Monitor

Equinox Beta

Seattle Beta

Unlock your full community experience!

About VinceM