About soporteseguridad

Hi, we have installed the version 5.1.0 in Panorama and changed the values (LSI,RAM,SO) in VM, but when we restart the VM the panorama is not going up.    CMS withouth credentials is not working.    Maintenance mode shows this:     What could we do??? ... View more

Hello,   We are having a annoying issue :S We have configured a tunnel routed-based between PA (7.0.6) to Microsof azure. The tunnel is up but we are detecting several problems.    1) The transfer speeds are very low, fluctuate and are nothing stable: When we try to move a file using this tunel from Azure to one of our servers in PA, the transfer speed is so slow (200-300Kb/s). But if we use a RAD (windows machine which go up the tunnel) the transfer speed is 7Mb/s). Why the speed is slow if the PA bring up th tunnel?    2) The Azure server is not reaching internet through this tunnel. In addition, the server is still unable to navigate to the outside. We do not see  in PA that traffic comes to us from Azure. Coming from Azure, we only see in PA connections to internal networks, when all traffic from Azure (to internal or to EXTERNAL) should go in the tunnel. If we want that this Azure server goes to internet using this tunnel its necessary to configure tunnel ikev2 and dynamic.These are requisites of Microsoft Azure. WE have configured all of this but we cant reach internet using tunel to PA.   We have tried to changed the MTU and several paramethers in VPN but its stilll hapening......any idea???'   thanks a lot   So that the server can browse to the outside our tunnel, the tunnel need to talk IKEv2 and that is dynamic, are the requirements of Azure. ... View more

Hello,   We have all our branches in south america going to internet through a PA located in Boston. This PA has configured captive portal for all these branches (each branch has own domain controller), This PA in Miami has a VPN to Barcelona from where takes the LDAP group for captive portal. The problem is that last week the VPN went down so no users in south america could go to INTERNET, because PA Boston didnt take LDAP from BARCELONA because this  was VPN down.   So there is any way  in Captive portal to configure that Palo Alto Boston first try to take LDAP groups from diferent branches in south american, and if its not working, take the LDAP groups from Barcelona or viceversa.   Thanks ... View more

Hi,   We have several Palo Alto FWs in diferent PanOS. W want to update our panorama to version 7.0.6 but we dont know if this panorama in 7.0.6 could manage FWs in PanOS 5.0???   Regards, Jesus C. ... View more

Hi,   If i run these commands in FW will affcet to the service???   Please try restarting the User-ID  >Debug software restart process user-id >Debug user-id reset user-id-agent all   How log affect to the users? Should i ask for a window maintenance?   Thanks a lot. ... View more

  Hi,   We are having a lot of strage log in the useridd.log file. We dont know why we are receiving these logs. The LDAP is configured correctly and we have the read permissions for everything in AD user. Users are working fine.   Please why are we recinivng these logs and how ca we solve??   2016-04-19 09:01:58.577 +0200 connecting to ldap://[192.168.49.81]:636 with StartTLS... 2016-04-19 09:01:58.579 +0200 Error: pan_ldap_init_ex(pan_ldap.c:252): start_tls_s return(-1) : Can't contact LDAP server 2016-04-19 09:01:58.579 +0200 connecting to ldaps://[192.168.49.81]:636 ... 2016-04-19 09:01:58.585 +0200 ldap cfg LDAP_xx connected to 192.168.49.81:636(index 1) 99%2016-04-19 09:01:58.587 +0200 Error: pan_ldap_ctrl_search_single_group(pan_ldap_ctrl.c:2657): failed to get group obj for 'cn=pa_vectorsf,ou=firewall_groups,ou=groups, ou=mng,dc=intranet,dc=,dc=es' 2016-04-19 09:01:58.587 +0200 Error: pan_ldap_ctrl_query_single_included_group(pan_ldap_ctrl.c:2928): pan_ldap_ctrl_search_single_group() failed for 'cn=pa_vectorsf,ou =firewall_groups,ou=groups,ou=mng,dc=intranet,dc=xxxxx,dc=es' 2016-04-19 09:01:58.587 +0200 Error: pan_ldap_ctrl_query_limited_groups(pan_ldap_ctrl.c:3030): pan_ldap_ctrl_query_single_included_group() failed 2016-04-19 09:01:58.638 +0200 Error: pan_ldap_ctrl_search_single_group(pan_ldap_ctrl.c:2657): failed to get group obj for 'cn=pa_vdi_externos,ou=firewall_groups,ou=gro ups,ou=mng,dc=intranet,dc=xxxxx,dc=es' 2016-04-19 09:01:58.638 +0200 Error: pan_ldap_ctrl_query_single_included_group(pan_ldap_ctrl.c:2928): pan_ldap_ctrl_search_single_group() failed for 'cn=pa_vdi_externo s,ou=firewall_groups,ou=groups,ou=mng,dc=intranet,dc=xxxxx,dc=es' 2016-04-19 09:01:58.638 +0200 Error: pan_ldap_ctrl_query_limited_groups(pan_ldap_ctrl.c:3030): pan_ldap_ctrl_query_single_included_group() failed 2016-04-19 09:01:58.788 +0200 Error: pan_ldap_ctrl_search_single_group(pan_ldap_ctrl.c:2657): failed to get group obj for 'cn=vdi_sap_deloitte_sin_office,ou=vdi-nutani x,ou=groups,ou=mng,dc=intranet,dc=xxxxx,dc=es' 2016-04-19 09:01:58.788 +0200 Error: pan_ldap_ctrl_query_single_included_group(pan_ldap_ctrl.c:2928): pan_ldap_ctrl_search_single_group() failed for 'cn=vdi_sap_deloit te_sin_office,ou=vdi-nutanix,ou=groups,ou=mng,dc=intranet,dc=xxxxx,dc=es' 2016-04-19 09:01:58.788 +0200 Error: pan_ldap_ctrl_query_limited_groups(pan_ldap_ctrl.c:3030): pan_ldap_ctrl_query_single_included_group() failed 2016-04-19 09:01:59.152 +0200 Error: pan_ldap_ctrl_search_single_group(pan_ldap_ctrl.c:2657): failed to get group obj for 'cn=pa_vdi_ipm,ou=firewall_groups,ou=groups,o u=mng,dc=intranet,dc=xxxxx,dc=es' 2016-04-19 09:01:59.152 +0200 Error: pan_ldap_ctrl_query_single_included_group(pan_ldap_ctrl.c:2928): pan_ldap_ctrl_search_single_group() failed for 'cn=pa_vdi_ipm,ou= firewall_groups,ou=groups,ou=mng,dc=intranet,dc=xxxxx,dc=es' 2016-04-19 09:01:59.152 +0200 Error: pan_ldap_ctrl_query_limited_groups(pan_ldap_ctrl.c:3030): pan_ldap_ctrl_query_single_included_group() failed 2016-04-19 09:01:59.153 +0200 Error: pan_ldap_ctrl_search_single_group(pan_ldap_ctrl.c:2657): failed to get group obj for 'cn=pa_vdi_opentrends,ou=firewall_groups,ou=g roups,ou=mng,dc=intranet,dc=xxxxx,dc=es' 2016-04-19 09:01:59.153 +0200 Error: pan_ldap_ctrl_query_single_included_group(pan_ldap_ctrl.c:2928): pan_ldap_ctrl_search_single_group() failed for 'cn=pa_vdi_opentre nds,ou=firewall_groups,ou=groups,ou=mng,dc=intranet,dc=xxxxx,dc=es' 2016-04-19 09:01:59.153 +0200 Error: pan_ldap_ctrl_query_limited_groups(pan_ldap_ctrl.c:3030): pan_ldap_ctrl_query_single_included_group() failed 2016-04-19 09:01:59.233 +0200 Error: pan_ldap_ctrl_search_single_group(pan_ldap_ctrl.c:2657): failed to get group obj for 'cn=cc-1129,ou=cc_groups,ou=security groups,o u=groups,ou=mng,dc=intranet,dc=xxxxx,dc=es' ... View more