About Sarc845

Sarc845 · ‎01-12-2022

Hi Nikolay, Yep, checked the service connections. Nothing strange there.

Sarc845 · ‎01-12-2022

Thanks for the input, its not setup. So will probably escalate to panw

Sarc845 · ‎01-12-2022

Hi @Joel_W Like Pavel said, you can extract the tgz file and you will get a .xml file --Go to panorama -> Setup --> Operations --> Import named Panorama configuration snapshot --> Import the extracted .xml file --Go to panorama -> Setup --> Operations --> Load named Panorama configuration snapshot --> Load the extracted .xml file -- NB - Make sure to uncheck all other options except "Retain Rule UUIDs" and click OK --Refresh the page and check for Device Groups and Templates

Sarc845 · ‎01-06-2022

Hi Blilal, Ive tested this on 5.2.9 and do not see the same problem. Kindly can you confirm if you have authentication override setup? Network> Portal/Gateway > Agent > Relevant Agent Config > Authentication > Authentication Override: If you have this setup it could be that the agent has a cookie and is using the cookie to authenticate. https://docs.paloaltonetworks.com/globalprotect/8-1/globalprotect-admin/authentication/about-globalprotect-user-authentication/how-does-the-app-know-what-credentials-to-supply/cookie-authentication-on-the-portal-or-gateway.html If you do not have this on the portal and gateway I would recommend opening a case with PANW to investigate.

Sarc845 · ‎01-06-2022

Hi @Nikhil, I ran into this issue a while back, I had to create a decryption bypass for the url. You can validate it by looking at the below. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POJ0CAO&lang=en_US%E2%80%A9

Sarc845 · ‎01-05-2022

Hello Everyone, Has anyone ever seen this commit error before? Validation Error: plugins -> cloud_services -> service-connection -> quarantine-list-redistribution unexpected here plugins -> cloud_services -> service-connection is invalid Little confused as there is no quarantine list feature here?

Sarc845 · ‎10-29-2021

Solution to this one was to install the agent/ edit the registry key related to the connect method: Script: CONNECTMETHOD=”pre-logon" Registry Key: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\Settings New String Value > connect-method > pre-logon And the following: Pre-logon=1 Portal="x.x.x.x" Machine Certificate

Sarc845 · ‎10-27-2021

Hi Everyone, We seem to have an issue where pre-logon doesn’t work on a laptop till after a user has logged into the device. We have checked and we are setting the pre-logon value to 1 in the registry. On the login screen of the laptop it says GlobalProtect Status: Connected and Connected Gateway. But we cannot see a connection on the Firewall. Anyone run into this issue before?

Sarc845 · ‎03-23-2021

@Pasquale01 BPry is correct, you can configure this in the Portal settings under the Agent Configurations.

Sarc845 · ‎03-23-2021

Hi PPerrotta, You can setup a policy denying unknown users in the security policy with the action of block: Using Global Protect your user identification should work just fine so no need to worry about users not being identified when connecting to the vpn. Make sure your source zone and source addresses are from the VPN otherwise you might block traffic like printers etc unless you use the api to identify those devices. ++ Edit You might have to allow your users to go to your okta tenant <domain>.okta.com above the deny policy to allow them to authenticate if you are using internal gateways as well

Sarc845 · ‎03-23-2021

I found the below live community article, might be worth a try: https://live.paloaltonetworks.com/t5/general-topics/dataplane-goes-restarted/td-p/382477

Sarc845 · ‎03-23-2021

Hi, We have a firewall that is crashing when Cisco SFP's are plugged in, I know they are not supported and that is what we mentioned to the customer. This issue started with version 10.0.3 and worked in pervious versions in 9.1.x I noticed the brdagent reboots every time the SFP's are plugged in or if a failover occurs to the secondary. I had a look at the known bugs but could not find anything, any suggestions?

Sarc845 · ‎02-03-2021

Update: TAC noted several issues with the /reports_gen process and needed to log into the firewall with root credentials to fix. report_gen ======== 2021-02-01 01:04:32.936 +0200 Warning: main(pan_report_gen.c:2178): ========= REPORT_GEN(20558): Done ========== 2021-02-01 02:47:07.749 +0200 Error: pan_logdb_construct_loghdr(pan_logdb_utils.c:811): Failed to open file /opt/pancfg/mgmt/logdb/traffic/1/20210130/pan.1213590405.log 2021-02-01 02:47:07.750 +0200 Error: pan_logdb_construct_loghdr(pan_logdb_utils.c:811): Failed to open file /opt/pancfg/mgmt/logdb/traffic/1/20210130/pan.1212651820.log 2021-02-01 02:47:07.750 +0200 Error: pan_logdb_construct_loghdr(pan_logdb_utils.c:811): Failed to open file /opt/pancfg/mgmt/logdb/traffic/1/20210130/pan.1211713235.log 2021-02-01 02:47:07.750 +0200 Error: pan_logdb_construct_loghdr(pan_logdb_utils.c:811): Failed to open file /opt/pancfg/mgmt/logdb/traffic/1/20210130/pan.1210774650.log 2021-02-01 02:47:07.750 +0200 Error: pan_logdb_construct_loghdr(pan_logdb_utils.c:811): Failed to open file /opt/pancfg/mgmt/logdb/traffic/1/20210130/pan.1209836065.log

Sarc845 · ‎01-19-2021

Hi BPry, Yes it gives the same results. We have recently upgraded to 9.1.6 and it seems to be intermittent now, we will be able to run the report maybe every two days. So in summary, manually running the report gives intermittent success and running the reports through a email schedule will also provide intermittent results. BR, S

Sarc845 · ‎12-18-2020

Hey Gabriel, I would test using path-monitoring setup similar to the below and create the same for the second route on the SAME VR: Once the ISP Peer becomes unreachable via ICMP it will remove it from the routing table and fall back to the failover default route: And then create the same setup for the second VR EDIT: Remember to set a higher metric for the failover route and note the failover route routes to the next VR

Member Since	‎05-07-2018 04:06 AM
Date Last Visited	‎04-14-2022 06:03 AM
Posts	19
Total Likes Received	10

Online Status	Offline
Date Last Visited	‎04-14-2022 06:03 AM

About Sarc845

Re: Prisma Access Validation Error Quarantine List

Re: Prisma Access Validation Error Quarantine List

Re: Restore Panorama after hardware failure

Re: VPN access can be made without credentials After GP 5.2.9 version update

Re: website access gives an error ERR_ssl_protocol

Prisma Access Validation Error Quarantine List

Re: Pre Logon VPN does not work with Golden Image

Pre Logon VPN does not work with Golden Image

Re: GlobalProtect - Block internet access if user does not authenticate

Re: GlobalProtect - Block internet access if user does not authenticate

Re: Prisma Access Validation Error Quarantine List

Prisma Access Validation Error Quarantine List

Re: Pre Logon VPN does not work with Golden Image

Re: GlobalProtect - Block internet access if user does not authenticate

Re: Predefined Firewall Report Error - No matching data found

Re: Pre Logon VPN does not work with Golden Image

Customer Support Resources - At Your Fingertips

Re: Prisma Access Validation Error Quarantine List

Re: Prisma Access Validation Error Quarantine List

Re: Restore Panorama after hardware failure

Re: VPN access can be made without credentials After GP 5.2.9 version update

Re: website access gives an error ERR_ssl_protocol

Prisma Access Validation Error Quarantine List

Re: Pre Logon VPN does not work with Golden Image

Pre Logon VPN does not work with Golden Image

Re: GlobalProtect - Block internet access if user does not authenticate

Re: GlobalProtect - Block internet access if user does not authenticate

Re: Firewall Interfaces Not Working and Crashing when SFP's are plugged in

Firewall Interfaces Not Working and Crashing when SFP's are plugged in

Re: Predefined Firewall Report Error - No matching data found

Re: Predefined Firewall Report Error - No matching data found

Re: Can I create a dual globalprotect gateway on my firewall with ISP failover?

Unlock your full community experience!

About Sarc845