About kchopra01

kchopra01 · ‎05-31-2018

Thanks man...i got it now...

kchopra01 · ‎05-30-2018

Hey thanks man for the solution.... So , i just need to add just one more UIA under device>user identification> user id agent and thats it right ?? In that way , I would be seein two servers connected ( green) and my firewall will talk to two servers at the same time and if there is any conflict, it would read windows event logs.....to cross verif and send results ...right ?

kchopra01 · ‎05-30-2018

oh thats great if you are using it already ! But I have one doubt , whether panos reads those both servers in sequence ( kind of active -passive style) or it monitors both simulatenously ? Also, if it monitors both at the same time then isn't it it creates problem ? because it is reading logs from both UIA, so whose result it will give to firewall ?? UIA1 or 2 ? sorry if it sounds silly but i need clarity before implementing.. thanks

kchopra01 · ‎05-30-2018

thanks a lot for the detailed information.... Actually I was doing silly mistake which was with adapters only... Thanks anyways

kchopra01 · ‎05-30-2018

Hi Techies, I have a small doubt whether I can add more than one UIA server in my firewall in the sense that they should behave kind of active passive . Requirement is something like that I want to secure user id functionality on firewall so that if one of my UIA gets down , then firewall should contact other UIA server for that.... Let me know if we have any solution for it ...

kchopra01 · ‎05-29-2018

Hi All, I cant give the ip to my tool . i tried by sudo nmtui / sudo ifconfig but nothing works....I have set all adapters.. dont know where to go next...pls suggest if anybody has gone through similar situation

kchopra01 · ‎05-03-2018

Hi Peter, Just going through your solution . So , If I want to use internal PKI infra , then there is no need to generate CSR on firewall ? What do I tell my customer like , to directly provide me the CA certificate ? I mean they dont need my CSR ? Because when I am providing CSR and importing certificate , then that forward trust option is greyed out ...

kchopra01 · ‎04-20-2018

yes obviously i need to add 2nd ISP . But this approach is correct right ? I mean, one wire from 1st ISP will be plugged into a switch and one wire from 2nd ISP would be plugged into same switch ..right ? ...I am referring these two switches as single switch because they are in stack....

kchopra01 · ‎04-20-2018

Yes ....you are right I can use ECMP but the point is how would be my network look like ?? Is it the same way what I have attached above ... My only query was how my physical connectivity would be if I want full redundant network .....i mean 2 firewalls and 2 switches and maybe 2 ISP's ..\ thanks

kchopra01 · ‎04-20-2018

now I am attaching a rough network diagram . this will give you idea of what I have in mind for redundant network . now even if one switch fails, i would be able to communicate with second switch .. correct me if my above approach is wrong....

kchopra01 · ‎04-20-2018

Hey thanks As I will be load balancing two ISP's ...and in this case , traffic from active (1st one ) firewall towards second ISP is not possible ...right ?

kchopra01 · ‎04-20-2018

waiting for your reply..

kchopra01 · ‎04-20-2018

Yeah You are right ! Oke I will be attaching rough diagram of my network in just few minutes so that I can tell you what is in my mind.. Meanwhile, Tell me one thing that If we go for 2nd ISP's , then how will be the network connectivity ??? I mean the purpose is full redundancy..

kchopra01 · ‎04-20-2018

Hey thanks for converting my words into a diagram.... But see lets suppose I am using single switch , so here the problem is that my whole network is relying on this single switch.. I actually want to use 2 switches so that if one fails , network is still up.....Please guide me on that..

kchopra01 · ‎04-19-2018

Hi All technical people , I have a simple query . I want to use PA firewall in HA and with a single ISP . In this case , as obvious, I need to use a switch in between my firewall and ISP and my understanding is clear upto this point but the real problem starts when I have to use two switches in between firewall and ISP for redundancy. 'My query is how can I achieve this ???? Do I to place 2 switches in stack and configure aggregate interfaces ?? or do I have another option of achieving the same ?? Pls help

Member Since	‎04-05-2018 12:35 PM
Date Last Visited	‎10-21-2019 05:48 AM
Posts	20

Online Status	Offline
Date Last Visited	‎10-21-2019 05:48 AM

About kchopra01

Re: adding more than one UIA agent on firewall?

Re: adding more than one UIA agent on firewall?

Re: adding more than one UIA agent on firewall?

Re: cant give IP to tool through vmware workstation

adding more than one UIA agent on firewall?

cant give IP to tool through vmware workstation

Re: SSL Decryption - Enterprise CA

Re: Designing Networks with Palo Alto Networks Firewalls

Re: Designing Networks with Palo Alto Networks Firewalls

Re: Designing Networks with Palo Alto Networks Firewalls

Re: adding more than one UIA agent on firewall?

Re: SSL Decryption - Enterprise CA

Re: Configure second ISP with failover and aggregation

Re: adding more than one UIA agent on firewall?

Re: adding more than one UIA agent on firewall?

Re: adding more than one UIA agent on firewall?

Re: cant give IP to tool through vmware workstation

adding more than one UIA agent on firewall?

cant give IP to tool through vmware workstation

Re: SSL Decryption - Enterprise CA

Re: Designing Networks with Palo Alto Networks Firewalls

Re: Designing Networks with Palo Alto Networks Firewalls

Re: Designing Networks with Palo Alto Networks Firewalls

Re: Designing Networks with Palo Alto Networks Firewalls

Re: Designing Networks with Palo Alto Networks Firewalls

Re: Designing Networks with Palo Alto Networks Firewalls

Re: Designing Networks with Palo Alto Networks Firewalls

Designing Networks with Palo Alto Networks Firewalls

Unlock your full community experience!

About kchopra01