About ZEBIT

We are trying to install a new Traps Core 4.2.3 enviroment. When the installation is in progress, after a while we see rollback action. The installation log file doesn't really say much: 27/02/2019 9:11:55 Starting certificate password validation 27/02/2019 9:11:55 Certificate password is valid. 27/02/2019 9:11:55 Certificate has expiration date: 22/04/2020 10:43:27. 27/02/2019 9:13:12 Entered ValidateDBConnectionInternal, isQuiet = False 27/02/2019 9:13:12 Attempting to open configuration file of: '' 27/02/2019 9:13:12 Does AppSetting 'sqlOverSsl' exist in file: False 27/02/2019 9:13:12 Does AppSetting 'sqlOverSslValidateCert' exist in file: False 27/02/2019 9:13:12 No existing SSL configuration values, resorting to default behavior 27/02/2019 9:13:12 PREVIOUSVERSIONSINSTALLED = 27/02/2019 9:13:12 isUpgrade = False 27/02/2019 9:13:12 serverName: DBSERVER.domain.local, serverNameFqdn: DBSERVER.domain.local, authType: WindowsAuthentication, dbName: TrapsDB, user: domain\user, SSL:False, SSL_ValidateCert: False 27/02/2019 9:13:12 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.DbConnectionValidation 27/02/2019 9:13:12 Trying to connect to DB DBSERVER.domain.local 27/02/2019 9:13:12 Validation result is: True 27/02/2019 9:13:12 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.PermissionsValidation 27/02/2019 9:13:12 Validation result is: True 27/02/2019 9:13:12 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.CaseSensitiveValidation 27/02/2019 9:13:12 Validation result is: True 27/02/2019 9:13:12 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.LatencyValidation 27/02/2019 9:13:12 Latency calculated: 0 27/02/2019 9:13:12 Validation result is: True 27/02/2019 9:13:12 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.EsmSchemaValidation 27/02/2019 9:13:13 Validation result is: True 27/02/2019 9:13:13 Validated: True, IsMulti: False, IsReinstall: True, IsConsole: False, IsUpgrade: False   Without SSL: 27/02/2019 12:18:32 Starting certificate password validation 27/02/2019 12:18:32 Certificate password is valid. 27/02/2019 12:18:32 Certificate has expiration date: 22/04/2020 10:43:27. 27/02/2019 12:19:04 Entered ValidateDBConnectionInternal, isQuiet = False 27/02/2019 12:19:04 Attempting to open configuration file of: '' 27/02/2019 12:19:04 Does AppSetting 'sqlOverSsl' exist in file: False 27/02/2019 12:19:04 Does AppSetting 'sqlOverSslValidateCert' exist in file: False 27/02/2019 12:19:04 No existing SSL configuration values, resorting to default behavior 27/02/2019 12:19:04 PREVIOUSVERSIONSINSTALLED = 27/02/2019 12:19:04 isUpgrade = False 27/02/2019 12:19:04 serverName: DBSERVER.domain.local, serverNameFqdn: DBSERVER.domain.local, authType: WindowsAuthentication, dbName: TrapsDB, user: domain\user, SSL:False, SSL_ValidateCert: False 27/02/2019 12:19:05 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.DbConnectionValidation 27/02/2019 12:19:05 Trying to connect to DB DBServer.wamo.local 27/02/2019 12:19:05 Validation result is: True 27/02/2019 12:19:05 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.PermissionsValidation 27/02/2019 12:19:05 Validation result is: True 27/02/2019 12:19:05 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.CaseSensitiveValidation 27/02/2019 12:19:05 Validation result is: True 27/02/2019 12:19:05 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.LatencyValidation 27/02/2019 12:19:05 Latency calculated: 0 27/02/2019 12:19:05 Validation result is: True 27/02/2019 12:19:05 Start db validation of type: Cyvera.Server.WiXCustomActions.Validations.EsmSchemaValidation 27/02/2019 12:19:05 Validation result is: True 27/02/2019 12:19:05 Validated: True, IsMulti: False, IsReinstall: True, IsConsole: False, IsUpgrade: False ... View more

We have some issues for some users with the globalprotect vpn to connect to our PA-3260 firewall. To solve this issue technical support told us to upgrade to our PanOS from 8.1.2 to 8.1.3. We did this morning and everything went fine till 1PM. From some users we received there was a connectivity issue to internet, other users told us they couldn't connect to servers public IP behind the firewall. Start troubleshooting the whole network we could see in our arp table of the router that mac-addresses of the firewall had an "incomplete" ip address. Looking further in this issue we found that the firewall didn't send any ARP messages anymore to any device and due that the external servers couldn't be reached through the router. We also found that GUI was reacting very slow. After 4 hours of troubleshooting with the technical support from the Palo Alto partner we decided to go back to version 8.1.2. We restarted the firewall and all the issues above were solved.   I think Palo Alto need to have a look into the 8.1.3 release. ... View more

We are migrating our Active-Passive PA-500 enviroment to an Active-Passive PA-3260 enviroment. In the PA-500 for the High Availability Control Link (HA1) was ethernet 1/7 and for the Data Link (HA2) it was ethernet 1/8. For the PA-3260 I can use HA1-A but for the Data Link I would like to use HA1-B but I'm only able to select the HSCI interface. Why is this ? ... View more

We are installing ESM in our enviroment. When we install the server ask if you want to use SSL connection between client and server. Ofcourse we want this but we want to use a certificate from our Windows Server CA server. We will protect Windows and Mac systems. Our ESM server and certificate server are seperated machines but I don't have a clue what SSL certificate I need to create? When I want to request from the ESM server a computer certificate I can choose from the templates that are available in our CA server. Is this the way to go?   Thanks ... View more

Hi,   I'm getting the question of the management to block all sites that are dealing with selling or buying crypto coins. They are getting tired of it that lots of employees are wasting time to check there crypto coins all the time and buy and sell them. Is there a way to block this in the firewall? I'm afraid that all of these sites are in the category financial, but our financial team must be able to visit bank sites. ... View more

For our website we host a database in our DMZ network. When we recieve a lot of calls from the website to the database the connection get a reset because the firewall see this as an attack (40031). Is there a way to configurate that the firewall allow more connections but that we are still save for attacks? ... View more