About Marc_T

Marc_T · ‎05-25-2021

Hi All, I would like to confirm if it is just my installation but it would appear that Expedition 1.1.98 does not have the option of importing a M600 device. There is only the option for m100 and m500. When attempting to use an m500 I get an `Exception Error` when adding credentials. M

Marc_T · ‎04-07-2021

From reading the time frame option for reporting I should still be able to see the reports for longer than 7 days for example as these produce reports every day for the last 7 days, as mentioned even the pre-defined reports are limited to 7 days on Panorama but I can see months worth of reports on the firewall which is confusing. /M

Marc_T · ‎04-07-2021

Hi All, Is there a setting that I am missing in Panorama for the retention of the reports created in the reports tab under monitor ? On Panorama for any default or scheduled report I only have the ability to go back 7 days: This goes for any scheduled custom report or the pre-defined reports. Panorama: However on the firewall its self I have months worth or reports available to me: Firewall: Panorama and Firewall version is 8.1.18. Thanks /M

Marc_T · ‎02-01-2021

There are more details as to the configuration here - Allow only a single YouTube Video Configuration This solution would also work well in conjunction with Minemeld to create URL based EDLs to white list specific channels on YouTube more details can be found here - YouTube Miner - Minemeld Hope this helps /M

Marc_T · ‎05-24-2020

Hi Joe, Great article, one thing I would add in to your deny category is the mobile "m.youtube.com" and embedded "youtube.com/embed/" options for viewing videos as these will allow users to bypass your rule base for YouTube. The added and modified url look something like: *.youtube.com/watch?v= *.youtube.com/embed/ Cheers /M

Marc_T · ‎02-23-2020

Hi @nolansuess , Its been a while since I used this so I hope all the information I have still configured in my firewall is still valid. There are the certificates I had to install and then create a certificate profile from: You should be able to download any updated certs from here: https://support.jumpcloud.com/support/s/article/jumpcloud-radius-certificate-for-eap-ttls-client-deployments1-2019-08-21-10-36-47 Once I had all that configured I created the Radius profile as per usual Let me know if this helps /M

Marc_T · ‎05-16-2019

Hi All, I am busy testing login events for the API in Panorama to reditribute to the firewalls, when ever I execute the API call I get a 400 error returned: <response status="error" code="400"> <result> <msg>You must specify a valid Device Group</msg> </result> </response> I have looked through all the documentation I can find but do not see the correct formating and xml entry for specifing the device group. I have the following: <uid-message> <version>1.0</version> <type>update</type> <payload> <login> <entry name="testuidpanorama" ip="x.x.x.x" timeout="20"> </entry> </login> <device-group> <entry name="dgname"> </entry> </device-group> </payload> </uid-message> Any pointers ? Regards /M

Marc_T · ‎04-05-2019

Just a question regarding MFA for Globalprotect portal as well as the client. I am using Jumpcloud configured as my SAML iDP, when I use the native MFA for Duo captive portal returns the MFA prompt and send me a push message. If I configure the same iDP with MFA on the Globalprotect portal I do not see the MFA challenge page. Question: Is this as intended, as some of the documents I have read require you to use either the DAG or proxy from DUO but I was under the impression if I used SAML auth the native MFA integration would work. Many Thanks M

Marc_T · ‎04-04-2019

Looks like I have managed to solve this issue, appears I had the wrond certificate chains loaded.

Marc_T · ‎03-31-2019

It would appear that PPPoE interface connections are not supported for the DDNS configuration. https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/networking/dynamic-dns-overview.html

Marc_T · ‎03-26-2019

I would be interested to know which DDNS provier you are using and the required certs, it would help with with a known workling config to ensure I have that setup correctly before I run down other rabbit holes. Many Thanks /M

Marc_T · ‎03-26-2019

Hi, I have configured a RADIUS profile to use a "Directory as a service" provider (JumpCloud) for authentication, I have tested this with LDAP and everything seems to work as intended but when I configure the Radius profiles and test authentication via the cli I get the following response Failed EAPOL auth (-1). Response for user: "bob" from RADIUS server: "self signed certificate in certificate chain; unknown CA" I have been through and installed the certificate chains for JumpCloud as well as the certificate they provide so I am not sure I understand exaclty what this certificate error is refering to. Any help will be appreciated. /M

Marc_T · ‎03-25-2019

That seems to be the issue, I do not get an IP via DHCP from the interface directly when connecting to the CPE, I have to initiate a PPPOE connection which does not seem to pass the IP address back unless I have a configuration error somehwere. Can you share some of your configuration, I have tried both NO-IP as well as DuckDNS /M

Marc_T · ‎03-23-2019

Hi. Can anyone tell me if they have had any sucess using the DDNS feature in PAN OS v 9.0 when using a PPPoE connection. The only option I have is DHCP and this throws an error when commiting the rule base to the firewall, looking at the runtime stats there is no ip information. /M

Member Since	‎11-06-2017 03:02 AM
Date Last Visited	‎03-10-2022 07:19 AM
Posts	17
Total Likes Received	5

Online Status	Offline
Date Last Visited	‎03-10-2022 07:19 AM

About Marc_T

Expedition v1.198 - Panorama M600

Re: Panorama Report Date Picker

Panorama Report Date Picker

Re: Tips & Tricks: Allow or Block YouTube Video

Re: Tips & Tricks: Allow or Block YouTube Video

Re: Jumpcloud RADIUS Auth failure

Panorama Device Group UserID

Globalprotect with DUO MFA and 3rd party iDP SAML Auth

Re: Jumpcloud RADIUS Auth failure

Re: PANOS 9.0 DDNS PPPoE

Re: Tips & Tricks: Allow or Block YouTube Video

Re: Tips & Tricks: Allow or Block YouTube Video

Jumpcloud RADIUS Auth failure

Re: Jumpcloud RADIUS Auth failure

How to SSL Bypass based on application

Expedition v1.198 - Panorama M600

Re: Panorama Report Date Picker

Panorama Report Date Picker

Re: Tips & Tricks: Allow or Block YouTube Video

Re: Tips & Tricks: Allow or Block YouTube Video

Re: Jumpcloud RADIUS Auth failure

Panorama Device Group UserID

Globalprotect with DUO MFA and 3rd party iDP SAML Auth

Re: Jumpcloud RADIUS Auth failure

Re: PANOS 9.0 DDNS PPPoE

Re: PANOS 9.0 DDNS PPPoE

Jumpcloud RADIUS Auth failure

Re: PANOS 9.0 DDNS PPPoE

PANOS 9.0 DDNS PPPoE

Okta Cloud Directory Beta

Seattle Hardware Beta

Seattle Beta

Unlock your full community experience!

About Marc_T