About VinceM

VinceM · ‎01-10-2014

Hi, Is vpn is up, mean phase 1 and phase 2 should be ok? If no traffic, mean either no route in the PA (confirmed by the incomplete log in monitor session) or no proxy ID (as mentionne by Hulk). If VPN crash sometime, maybe: * not same lifetime / lifesize ? * have you configured the DPD ? Hope help. V.

VinceM · ‎01-09-2014

Hi, and what about your security rules ? and session log when decryption fail ? V.

VinceM · ‎01-09-2014

Hi, Ok with Kunal, just keep in mind to configure User logon too: Hope help V.

VinceM · ‎01-09-2014

Hi, If you palo is not over loaded, no visible benefit from either speed or snapiness. Just easier for you for managing your app. Hope help. V.

VinceM · ‎01-09-2014

Hi, Until you have this answer for the cp-policy command, that mean your cp policy doesn't match. Just check that under policy/Captiv Portal, your policy is correct. Hope help. V.

VinceM · ‎01-08-2014

Keep that in mind : Hope help V.

VinceM · ‎01-08-2014

Hi, There is a lot of issue with Chrome for uploading stuff in PA. Same issue for software for exemple. V.

VinceM · ‎01-08-2014

Hi, Done the upgrade yesterday and no issue ... on both PA500 and PA200. V.

VinceM · ‎01-08-2014

Hi Panos, For me, not possible until the CP be able to use cookies for authenticiation. When it will be ok , for sure you will be able to choose how long the cookie will be valid, a period of time or browser session. Hope help. V.

VinceM · ‎01-07-2014

Hi, Authentication result is not part of variable you can use in custom report. Create a fowarding profile for you system log and make filter in: Authent: Type: globalprotect Event: globalprotectportal-auth-succ or globalprotectportal-auth-fail Hope help v.

VinceM · ‎01-07-2014

Hi, not really clear .... maybe with a scheme 🙂 Have you got security rule based on web-browsing and app-default ? If yes, it can explain the situation, du to decryption, you have web-browsing on 443 and it doesn't match app-default. Hope help. V.

VinceM · ‎12-27-2013

Look in RN for 5.0.10:  58539—When using GlobalProtect pre-logon mode, an administrator was unable to log a user out from the web interface or the CLI and the session did not time out correctly. This was caused by an issue relating to different domain names being configured for the certificate profile and the authentication profile. This issue was fixed so that domain names are properly converted and users log out and time out as expected. Can be interesting for your case 🙂 Hope help V.

VinceM · ‎12-27-2013

Hi, Look in Rn for version 5.0.10, there is: 57612—SSH sessions to servers running OpenSSH version 6.2 or newer through SSH Decryption were failing in some instances when the computed Diffie-Hellman key is 4096 bits. Hope help. V.

VinceM · ‎12-26-2013

Great ...

VinceM · ‎12-26-2013

Hi, Sorry for miss-undersatnding. If the aim is to use to real IP ans not the GP one, for me it's not possible, the "real" IP never go through tyhe VPN. Question what's the problem for using GP's one ? Rgds V.

Member Since	‎08-27-2010 06:32 AM
Date Last Visited	‎04-19-2024 06:43 AM
Posts	444
Total Likes Received	121

Online Status	Offline
Date Last Visited	‎04-19-2024 06:43 AM

About VinceM

Re: DNS not resolving through Prisma Access for a particular domain

Re: Commit Warning for Antispyware

Re: Commit Warning for Antispyware

Re: User-ID Agent - [Error 115]: Cannot open security log for DC..

Re: Dataplane goes restarted

Re: Dataplane goes restarted

Re: infrastructure subnet sizing prisma access ?

Re: Dataplane goes restarted

Re: Panorama via S2S VPN

Re: IP Pool – TTL when IP is allocated?

Re: Commit Warning for Antispyware

Re: Request for Palo Alto PSE Strata Prof. clarification

Re: Panorama via S2S VPN

Re: IPSec VPN only config on VPN Gateway?

Re: Ethernet aggregate group

Re: Global Protect

Re: Global protect client for windows 11

Re: session per second

Re: Two Site to Site VPNs with the same external subnet.

Re: Can i configure duplicate IP's in seperate interaces in seperate VR on a single VSYS or seperate

How Do I Know if Traffic Is Hitting a Decryption Policy?

Re: VPN is UP but no traffic flows through

Re: ssl decryption vwire

Re: Is it possible to have Global Protect start on Windows and Mac automatically?

Re: Optimizing a particular website

Re: Can not use captive portal

Re: Destination NAT with different subnet of Outside interface.

Re: Importing a Customized Captive Portal Response Page ... Uploading forever

Re: LDAP profile broken after upgrading to 5.0.10

Re: ending captive session with browser close

Re: report custom

Re: ssl decryption vwire

Re: use GlobalProtect for Network Logon

Re: Problem with ssh decryption after SSH server upgrade

Re: use GlobalProtect for Network Logon

Re: use GlobalProtect for Network Logon

Equinox Beta

Seattle Beta

Unlock your full community experience!

About VinceM