About ZEBIT

Hi,   We are using a PaloAlto 3260 with PanOS 9.0.7. We have configured SSL decryption wich uses a certificate signed by our own Windows CA server. Each client in our environment has the Windows Root CA. In the beginning (2 years ago) everything worked well. We could decrypt everything except everything in the category financial. But now latest months it seems I need to add a lot of websites for no decryption because otherwise the employees can't visit the website. It is getting frustrated and I'm think about disabling SSL decryption, but maybe you guys know an answer or solution. Thanks. ... View more

We are trying to install a new Traps Core 4.2.3 enviroment. When the installation is in progress, after a while we see rollback action. The installation log file doesn't really say much: 27/02/2019 9:11:55 Starting certificate password validation 27/02/2019 9:11:55 Certificate password is valid. 27/02/2019 9:11:55 Certificate has expiration date: 22/04/2020 10:43:27. 27/02/2019 9:13:12 Entered ValidateDBConnectionInternal, isQuiet = False 27/02/2019 9:13:12 Attempting to open configuration file of: '' 27/02/2019 9:13:12 Does AppSetting 'sqlOverSsl' exist in file: False 27/02/2019 9:13:12 Does AppSetting 'sqlOverSslValidateCert' exist in file: False 27/02/2019 9:13:12 No existing SSL configuration values, resorting to default behavior 27/02/2019 9:13:12 PREVIOUSVERSIONSINSTALLED = 27/02/2019 9:13:12 isUpgrade = False 27/02/2019 9:13:12 serverName: DBSERVER.domain.local, serverNameFqdn: DBSERVER.domain.local, authType: WindowsAuthentication, dbName: TrapsDB, user: domain\user, SSL:False, SSL_ValidateCert: False 27/02/2019 9:13:12 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.DbConnectionValidation 27/02/2019 9:13:12 Trying to connect to DB DBSERVER.domain.local 27/02/2019 9:13:12 Validation result is: True 27/02/2019 9:13:12 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.PermissionsValidation 27/02/2019 9:13:12 Validation result is: True 27/02/2019 9:13:12 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.CaseSensitiveValidation 27/02/2019 9:13:12 Validation result is: True 27/02/2019 9:13:12 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.LatencyValidation 27/02/2019 9:13:12 Latency calculated: 0 27/02/2019 9:13:12 Validation result is: True 27/02/2019 9:13:12 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.EsmSchemaValidation 27/02/2019 9:13:13 Validation result is: True 27/02/2019 9:13:13 Validated: True, IsMulti: False, IsReinstall: True, IsConsole: False, IsUpgrade: False   Without SSL: 27/02/2019 12:18:32 Starting certificate password validation 27/02/2019 12:18:32 Certificate password is valid. 27/02/2019 12:18:32 Certificate has expiration date: 22/04/2020 10:43:27. 27/02/2019 12:19:04 Entered ValidateDBConnectionInternal, isQuiet = False 27/02/2019 12:19:04 Attempting to open configuration file of: '' 27/02/2019 12:19:04 Does AppSetting 'sqlOverSsl' exist in file: False 27/02/2019 12:19:04 Does AppSetting 'sqlOverSslValidateCert' exist in file: False 27/02/2019 12:19:04 No existing SSL configuration values, resorting to default behavior 27/02/2019 12:19:04 PREVIOUSVERSIONSINSTALLED = 27/02/2019 12:19:04 isUpgrade = False 27/02/2019 12:19:04 serverName: DBSERVER.domain.local, serverNameFqdn: DBSERVER.domain.local, authType: WindowsAuthentication, dbName: TrapsDB, user: domain\user, SSL:False, SSL_ValidateCert: False 27/02/2019 12:19:05 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.DbConnectionValidation 27/02/2019 12:19:05 Trying to connect to DB DBServer.wamo.local 27/02/2019 12:19:05 Validation result is: True 27/02/2019 12:19:05 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.PermissionsValidation 27/02/2019 12:19:05 Validation result is: True 27/02/2019 12:19:05 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.CaseSensitiveValidation 27/02/2019 12:19:05 Validation result is: True 27/02/2019 12:19:05 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.LatencyValidation 27/02/2019 12:19:05 Latency calculated: 0 27/02/2019 12:19:05 Validation result is: True 27/02/2019 12:19:05 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.EsmSchemaValidation 27/02/2019 12:19:05 Validation result is: True 27/02/2019 12:19:05 Validated: True, IsMulti: False, IsReinstall: True, IsConsole: False, IsUpgrade: False ... View more

We have some issues for some users with the globalprotect vpn to connect to our PA-3260 firewall. To solve this issue technical support told us to upgrade to our PanOS from 8.1.2 to 8.1.3. We did this morning and everything went fine till 1PM. From some users we received there was a connectivity issue to internet, other users told us they couldn't connect to servers public IP behind the firewall. Start troubleshooting the whole network we could see in our arp table of the router that mac-addresses of the firewall had an "incomplete" ip address. Looking further in this issue we found that the firewall didn't send any ARP messages anymore to any device and due that the external servers couldn't be reached through the router. We also found that GUI was reacting very slow. After 4 hours of troubleshooting with the technical support from the Palo Alto partner we decided to go back to version 8.1.2. We restarted the firewall and all the issues above were solved.   I think Palo Alto need to have a look into the 8.1.3 release. ... View more

We are migrating our Active-Passive PA-500 enviroment to an Active-Passive PA-3260 enviroment. In the PA-500 for the High Availability Control Link (HA1) was ethernet 1/7 and for the Data Link (HA2) it was ethernet 1/8. For the PA-3260 I can use HA1-A but for the Data Link I would like to use HA1-B but I'm only able to select the HSCI interface. Why is this ? ... View more