This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About zac_hg
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About zac_hg
6Posts
0Likes
0Solutions
Last Visited
User
Activity
User
Profile
Latest posts by zac_hg
| Subject | Views | Posted |
|---|---|---|
| 2040 | 11-14-2018 07:25 AM | |
| 4141 | 04-13-2016 09:08 AM | |
| 3638 | 12-09-2014 11:59 AM | |
| 3638 | 12-09-2014 10:59 AM | |
| 3705 | 12-09-2014 10:53 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 4 Likes |
User Badges
Community Statistics
| Member Since | 10-31-2014 08:31 AM |
| Date Last Visited | |
| Posts | 6 |
11-14-2018
07:25 AM
Hello - I'm looking for some way to force AnyConnect VPN users to go through the PAN which is on the inside for URL Filtering. A couple of caveats: - Can't move to GlobalProtect because of ISE integration with AnyConnect. - Want to use PAN for URL Filtering. Moving away from Proxy technology Remote AnyConnect VPN Users------>--------Internet----BGP--------ASA FW---------L3 OSPF------------Firepower-----------L3 OSPF-----------PAN FW with URL Filtering-----OSPF------Internal LAN Options I can think of Add connectivity between ASA and PAN so that the PAN is inline or before the ASA (vWire or L3) Use PBF/PBR to force the web traffic to Firepower then to PAN Move the PAN above ASA Does anyone have any other suggestions? Thanks so much!
... View more
- Tags:
- AnyConnect
- pbf
- url
04-18-2016
06:46 AM
Thanks @Brandon_Wertz
I suppose right.. Customer didn't flagged it haha 😉
... View more
12-09-2014
06:12 PM
I've confirmed that certificates are cached. The command to show the cache is show system setting ssl-decrypt certificate-cache To delete the cache certs then issue. debug dataplane reset ssl-decrypt certificate-cache But what I really want is to turn off caching altogether so that if I revoke a cert, the user can't connect anymore.
... View more
Contact Me
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks