This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences

About Nehmaan

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
Nehmaan
‎03-13-2024
since ‎09-18-2018
L2 Linker
User Activity
User Profile
Latest posts by Nehmaan
View All
My Liked Posts
View All
User Badges
Community Statistics
Member Since ‎09-18-2018 03:12 AM
Date Last Visited ‎03-13-2024 12:11 PM
Posts 18
Total Likes Received 2

Re: "Only self signed CA cert can have identical sub and issuer fields" when uploading a c

by in General Topics
‎04-01-2020 09:14 AM
‎04-01-2020 09:14 AM
The only case I've seen that is when the certificate is not valid for SAML purposes.    Which provider are you using ?   Do you not have an XML file which you can import, Modify CA flag and commit the change ? ... View more

Re: "Only self signed CA cert can have identical sub and issuer fields" when uploading a c

by in General Topics
‎04-01-2020 06:29 AM
‎04-01-2020 06:29 AM
No problem. Shout if you get stuck or need more help. ... View more

Re: "Only self signed CA cert can have identical sub and issuer fields" when uploading a c

by in General Topics
‎04-01-2020 06:10 AM
‎04-01-2020 06:10 AM
Nothing to do with Palo, Here you go mate.         ... View more

Re: "Only self signed CA cert can have identical sub and issuer fields" when uploading a c

by in General Topics
‎04-01-2020 04:31 AM
‎04-01-2020 04:31 AM
Is that the actual certificate ?   It's a root CA so it's going to have the CA flag already set.     Export candidate-config:         ... View more

Re: "Only self signed CA cert can have identical sub and issuer fields" when uploading a c

by in General Topics
‎03-31-2020 04:26 AM
‎03-31-2020 04:26 AM
You tried the workaround I mentioned ? ... View more

Re: Palo Alto blocks outbond cisco any connect traffic

by in General Topics
‎02-27-2020 10:44 AM
‎02-27-2020 10:44 AM
You just have to "No-Decrypt" the following two categories.    Within Anyconnect if you use: IP: Unknown Category DNS: Low-Risk Category ... View more

Re: Anydesk issue.

by in General Topics
‎02-26-2020 03:17 AM
‎02-26-2020 03:17 AM
Yes, On the assumption that the security rules doesn't exist. It does in my case.  ... View more

Re: Anydesk issue.

by in General Topics
‎02-26-2020 02:44 AM
2 Kudos
‎02-26-2020 02:44 AM
2 Kudos
OK got this working for now but not exactly the way I want.    1) Tag   2) Address Group   3) SSL Decryption Policy   4) Log Forwarding   5) Built-in Actions   6) Security Rule   ... View more

Re: Anydesk issue.

by in General Topics
‎02-26-2020 02:03 AM
‎02-26-2020 02:03 AM
Having the same issue. Pain in the ass! ... View more

Re: No logs on PA-200

by in General Topics
‎01-07-2020 02:10 PM
‎01-07-2020 02:10 PM
Interesting!   Give the daemon a restart:  debug software restart process log-receiver   Also take a look at the following links, They might help:   https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmA4CAK https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClozCAC ... View more

Re: No logs on PA-200

by in General Topics
‎01-07-2020 12:18 AM
‎01-07-2020 12:18 AM
Can you run the commands from CLI:    debug log-receiver statistics   debug log-receiver on debug tail follow yes mp-log logrcvr.log   ... View more

Re: "OSPF-neighbor-down"- software bug??

by in General Topics
‎01-06-2020 12:07 AM
‎01-06-2020 12:07 AM
One switch or two switches ? Checked STP topology changes ? Checked logs on the switch ? Do you have EtherChannel configured ?   Looking at the release notes, Can't spot any known issues related to OSPF.  ... View more

Re: No logs on PA-200

by in General Topics
‎01-05-2020 11:57 PM
‎01-05-2020 11:57 PM
Have you created any rules and or enabled loging at "session start/end" ?   Do you have traffic passing through the device ?   You can also enable logging for "intrazone-default" which is great for troubleshooting.        ... View more

Re: "Only self signed CA cert can have identical sub and issuer fields" when uploading a c

by in General Topics
‎01-03-2020 03:33 PM
‎01-03-2020 03:33 PM
No worries. 🙂   Think you need it for response and assertion to work correctly. Therefore, You'll need to ensure the CA flag is set.    I'm not 100% sure if that's how your supposed certs for this as neither Palo Alto nor Azure actually tell you how to do the certs correctly. 😞     ... View more

Re: "Only self signed CA cert can have identical sub and issuer fields" when uploading a c

by in General Topics
‎01-03-2020 03:17 PM
‎01-03-2020 03:17 PM
How did you define it within the authentication profile, certificate profile and SSL/TLS Service Profile ?   You can only select certs which have the CA flag set under "Certificate Profiles" which is then referenced within the "authentication profile".    For the "SSL/TLS service profile" the same applies but I've used a signed wildcard cert instead and imported the chain under "Certificates" to complete the trust.    Using SAML for Global Protect VPN.  ... View more
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎03-13-2024 12:11 PM
Latest Tags
No tags yet
Likes From
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks