About jesuscano

Hi,   We would like to have the IP assignment / deletion UserId information done by in PA Global Protect clients to be updated in our internal DNSs (Windows). Is that possible?   ... View more

Hi everybody,   Does anyone knows if it's required by Paloalto that the identification data fields during ike setup be encoded with utf8string? Or is there an incompatibility in Paloalto if these fields are encoded with printablesting?   The other end is not a Paloalto, if we use pre-shared keys it works fine. If I load the certificate from the other end on a Paloalto it works fine. In that case the payload ID is presented with utf8strings instead of printablestrings. I have read that for other manufacturers this is a problem, (the use of printablestrings).   Thanks a lot!     ... View more

Hello, it's about an ESM with 4.2.6 version.  Would like to know if there is any automatic process that you can run, recovering the hostnames from a .txt, to erase and break free the licenses automatically. I know  In Traps 4.0 and above is possible to configure an automatic license revocation when an endpoint is not connecting to the ESM for a period of time, but if someone knows the other way would be great.     ... View more

Hi,   We need to know why our UIAs are starting sessions to INTERNET in port 135.   how can we mitigate this flow? WE disblae UIA in INTERNET zone but we still see these sessions.   Here you can see the kind of  sessions:     any idea? ... View more

Hi,   Just to confirm. it would be compatible this: UserIdagent in version 9.0.x and FWs in version 8.0.13   WE need to upgrade FWs to version 9.0.x, and we are thinking to upgrade first UIA, but we are not sure about compatibility in UIA two major higher. ... View more

Hi,   I explain my scenario:   We need a cluster A/P in 8.0.x. We had issues upgrading when the LACP didnt come up in the passive node jumping to 8.1.10. So in the last try we realised that jumping to base 8.1.0 the LACP interfaces were up. So we will do this upgrade path: 8.0.13->8.1.0->9.0.0-> 9.0.9-h1.    Customer has UIA 8.1.6 version Panorama 8.1.6    My questions are: -What would you do with Panorama and UserId agent. Can we upgrade them before FWs. Is working Panorama and UIA in 9.0, and FWs in 8.0.x?  -How do you organize this in order to upgrade all platfom?         ... View more

 Hi,   We are detecting in Palo FW that there are sessions from UseriD-Agent servers to publics IPs. Our SOC confirmed that some of these public IPs are categorized like low reputation. Sessions are in port 135. I know the UserId agent uses this port but its reaching publics IPs. We have GP enabled, and there are also connections port 135 to the public client IPs. But there are anothe sessions to low reputatio ips   Why its having this behaviour? Any way to avoid these sessions from UIA to public IPS?.  ... View more

Hi,   We launched a sslab test for a GlobalProtect Portal website. Our note is B. We would like to improve these two things but we dont know what it can be done in PA config. These are:   There is no support for secure renegotiation.   MORE INFO » This server does not support Forward Secrecy with the reference browsers. Grade capped to B.   MORE INFO »   What means "secure renegotiation"? how can solve this in PA? what about Palo support froward secrecy? anything to do in Palo?   ... View more