About VinceM

hi,   Stupid question but have you configure some decryption rule ?? This error refer:   - no HSM availbale is configured   - No ressources available for decryption   - unsupported cypher suite ... If no user complin it's maybe because you allowed undecrypted traffic du to error ???   Globally, decryption with PA500 ... is not a good idea 😉   Hope help   V. ... View more

Hi,   Did you move from 7.1 to 8.0.0 then 8.0.2 ? I 've got many PA500 running in V8 and works well (slow .... but well)   Rgds   V. ... View more

Hi,   Keep in mind that if you want a flow move from on zone to another, you need a security rule. Then more you have zone more you hace security policies and potentially more you have to provide support and more it's difficult to maintain. If you work in a bank, for sure you need more zone than if you are a small company ...   Then there is no worldwide best best practice ... Just see a zone as a Trust group .... group in zone computer with same trust level.   Hope help   V.     ... View more

Hi all,   Use MDM ? How the  mobile facebook apps is seen by the palo ?   V. ... View more

Hi,   OTP is Ine Time Password .. but for GP, you need one auth onportal and one on gateway 🙂 Mean you need Two Time Password 🙂 or you just have to confogure on partial cookie generation and allow you rgatewy to use this cookie for authentication. https://www.paloaltonetworks.com.br/documentation/71/globalprotect/globalprotect-admin-guide/set-up-the-globalprotect-infrastructure/set-up-two-factor-authentication.html   Hope help.   V. ... View more

Hi,   Best for you could be tu use the API: https://www.paloaltonetworks.com/documentation/71/pan-os/xml-api   More flexible ....   Rgds   V. ... View more

Hi,   Welcome in tyhe SSL world 🙂 Are you sure that the request is sent in http ?? Do you implement decryption ? If you decrypt, are you sure your filtering profile is configured on the accurate policy ?   V. ... View more

Salut anthony,   Have you download the URL database ? does customer created a custom url category ?   V.   ... View more

Hi,   Just short add.  For log fowarding to Panorama directly, please look into the V8 release note ....   Rgds   V. ... View more

Hi,   Glastra1 answer is correct, it's a very old limitation which will be solved maybe one day or not ... No Need Vsys, Just VR Rgds ... View more

Hi,   For me 70xx plateform are provided with log collector then log are stored in. You can't forward log directly to Panorama: https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os/monitoring/configure-log-forwarding look for architecture: https://www.paloaltonetworks.com/documentation/70/panorama/panorama_adminguide/manage-log-collection/log-collection-deployments.html   For me no compression. If you need to estimate disk capacity, look: https://www.paloaltonetworks.com/documentation/60/panorama/panorama_adminguide/set-up-panorama/determine-panorama-log-storage-requirements   Hope help.   v. ... View more

Hi,   short question, do you enable response page in Device / Response page ? look: https://www.paloaltonetworks.com/documentation/71/pan-os/web-interface-help/device/device-response-pages   For SSL: https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Serve-a-URL-Response-Page-Over-an-HTTPS-Session-Without/ta-p/55998   Hope help   V. ... View more