About Radmin_85

MarekWalczak · ‎09-04-2018

Is there any commands I can run to display version of GlobalProtec client for all users? The version can be seen from the gui but for just a given user and the same info I can get by running below commands but again this command displays a version for that user only. debug user-id dump hip-report computer <computer-name> ip <global-protect-assigned-ip> user <username>

reaper · ‎07-25-2018

Hi! also check out the 'getting started' article : https://live.paloaltonetworks.com/t5/Featured-Articles/Getting-Started-User-ID/ta-p/69321

Radmin_85 · ‎07-09-2018

Hello we have a netwrok design where we want to filter some traffic from wifi zone to inside zone But the problem is when we try to get syslog from Cisco Wlc or access point we see only hostname\ip address combination not username. There is also an NPS server in the design where users get authentications.But we can not parse direct from NPS .we need some converter to convert SNMP trap to syslog from NPS. IT is ok when users connected through cable ,Because there is AD integration.But when they pass to WIFI where there is 802.1X authentication it is impossible to parse username\ip address

blabla · ‎07-09-2018

8.1.2 - same problem

Remo · ‎07-08-2018

@Radmin_85 You passed your PCNSE exam and this is your problem description? Come on, you can do better 😉

Radmin_85 · ‎07-07-2018

Hello i have passed PCNSE EXAM https://www.linkedin.com/feed/update/urn:li:activity:6416953323617865728/ i can help other guys too if you wish write me to email:shaigsamadov@gmail.com

RobinClayton · ‎07-02-2018

Skype for business in my opinion, is not fit for purpose. It may be fine in a small business that does not care about securoity and allows any old connection in and out. But in this modern world of security it requires so many services, ports, kludges and workarounds that it makes it unreliable and insecure. Microsoft need to tidy it all up. We just about have it working now. Rob

Radmin_85 · ‎06-25-2018

there is no mapping

Remo · ‎06-17-2018

Master Key and HA IPs must be configured locally on the firewalls Edit: I am somehow not able to post a link ... so simply google for "panorama template capabilities and exceptions 8.0" and the first link will show you the adminguide with the exceptions that cannot be configured in a template

BPry · ‎06-14-2018

@Radmin_85, That isn't really a lot to go off of. Can the users actually resolve the domains, do you see the traffic being reset at all, is it specific to Google websites? I've seen this in the past where a sole public IP is utilized to NAT a large amount of user traffic and it causes Google to rate limit or outright block that IP due to the number of requests they recieve per second; is this possibly what's taking place here?

Radmin_85 · ‎06-08-2018

thanks it worked with internet

BPry · ‎05-22-2018

@Radmin_85, Look into PBF. I think that's likely the closest match to DPI routing. If you are just looking for the inspection piece and not the routing piece that would simply be the default inspection capabilities and SSL Decryption.

Brandon_Wertz · ‎05-16-2018

@emr_1 I don't know if I'd tie it to the PAN-OS version. I'm running 8.0.7 on a 5220 pair and decrypt mirror is working just fine. Perhaps it's tied to a platform issue?

Remo · ‎05-11-2018

The root cert which signed the self signed portal certificate must be imported into the "Trusted certification authorities" folder on the clientcomuter (required admin privileges)

BPry · ‎05-07-2018

@Radmin_85, Depending on the configuration of the original unit this has been known to cause a few issues doing a straight import of the configuration. I schedule a time period where you could factory reset the device and rebuild the configuration, using the existing running-config.xml as a template on how everything was configured.

Member Since	‎08-01-2017 02:05 AM
Date Last Visited	‎02-22-2019 07:02 AM
Posts	146
Total Likes Received	9

Online Status	Offline
Date Last Visited	‎02-22-2019 07:02 AM

About Radmin_85

How to install self signed certificate to Android phones

Problems with ping due to SSL decryption

Re: Is it secure ?

Re: To force client to switch to internal network

Is it secure ?

Re: To force client to switch to internal network

Re: To force client to switch to internal network

Re: To force client to switch to internal network

Re: To force client to switch to internal network

Re: To force client to switch to internal network

Problem with MS Exchange 2016

ICAP protocol for DLP

Problems with assiging ip address to vm-50 on hyper-v

PCNSE exam passed

Duplicate Certificate Subject Found

Re: User mapping problem

Re: User mapping problem

Re: User mapping problem

Re: Auto reconnect Global Protect

Re: Problems with HIP profile logs

Re: Is it possible by PA

Syslog parsing from Cisco WLC

Re: Failed to get WF-500 UPDATES

Re: Problems with certain sites

PCNSE exam passed

Re: Skype for Business problem after migrating from ASA to PA-820

Re: Custom Syslog sender From Cisco WLC

Re: Master key and HA 1 ip address

Re: VM-50 DNS problems

Re: Configure DUAL ISP

Re: DPI SOLUTION

Re: Decrypt Port Mirror problem

Re: Global protect problem

Re: Problems after RMA

Unlock your full community experience!

About Radmin_85