This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About ErrantOsi
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About ErrantOsi
10-07-2020
11Posts
1Like
1Solution
Oct 07, 2020Last Visited
User
Activity
User
Profile
Latest posts by ErrantOsi
| Subject | Views | Posted |
|---|---|---|
| 2622 | 06-14-2019 07:29 AM | |
| 3769 | 06-07-2019 08:03 AM | |
| 1879 | 05-23-2019 05:01 AM | |
| 2573 | 04-15-2019 06:02 AM | |
| 4067 | 01-11-2019 12:35 AM | |
| 4090 | 01-09-2019 12:02 AM | |
| 3844 | 12-05-2018 06:41 AM | |
| 3852 | 11-21-2018 08:00 AM | |
| 3867 | 11-20-2018 03:12 AM | |
| 2383 | 10-31-2018 06:41 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 12-05-2018 06:41 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes | |||
| 1 Like | |||
| 3 Likes | |||
| 2 Likes |
User Badges
Community Statistics
| Member Since | 10-30-2018 08:25 AM |
| Date Last Visited | 10-07-2020 11:41 AM |
| Posts | 11 |
| Total Likes Received | 1 |
06-14-2019
07:29 AM
Hello Mates
Please excuse me for this very basic question, but is it possible to Export a PAN Firewall Config to a XML File, create a Project in Expedition with it, do some changes, Export the new Config File & Import it to the Firewall directly?
The background for this question is, that I did exactly this and when I check the "Preview Changes" at the Commit I see that the whole configuration syntax is being mixed. Although I only configured Tags to Security Policies and nothing else. (Thanks Multiedit 🙂 )
Did I do something wrong? Anyone had the same "issue"? My Firewall has the version 9.0.2 and I downloaded the newest Expedition Version (1.1.10)
Thanks in advance!
... View more
06-07-2019
08:03 AM
Hello Guys We have a security policy which goes with application & service any any to the internet. (that's another topic 😉 ) We want to block specific file types for downloading (.exe as an example). In the File blocking Profile we defined applications to any, configured the needed file types and set the action download to block. When we test downloads with the web application "wetransfer", we are still able to download .exe files over the configured security policy. Is file blocking not working with specific applications? Thanks in advance 🙂
... View more
- Tags:
- file blocking
05-23-2019
05:01 AM
Maybe create a Packet Capture and check if you see anything there?
... View more
04-15-2019
06:02 AM
Hey Guys We have noticed a weird behaviour: When I do a telnet to IP 1.1.1.1 Port 445 on our Terminal Server with the TS Agent installed, the associated Port Range will be used as expected and the source user-id will be mapped. But when we do a net use in the same CMD window, it won't associate it with the expected port range but with a higher, not related to the users one and won't map the user-id. Both connections are Port 445 (checked in the logs). I found this article online regarding that system context actions can't be mapped: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkCCAS Anyone has/had the same issue? Can it be that net use is running in system context and can't be tracked? Thanks and best regards
... View more
01-11-2019
12:35 AM
An Italian would say "perfetto" 🙂 Thanks!
... View more
01-09-2019
12:02 AM
Hello, Is it possible to whitelist specific software, such as MS Powershell as an example, in the Ransomware module in TMS? I searched for the option in the TMS, on google and here in the live community, but haven't found anything. Is this possible? Thanks and regards
... View more
12-05-2018
06:41 AM
1 Kudo
After some more troubleshooting we (my collegue 🙂 ) found the cause for the problem: The forward-trust certificate name was a hostname which the Firewall could resolve from external. The FW then tried to verify the CRL, but as the FW resolved it to an external address, the verification could not happen as the CRL verification should happen internally. After creating a new forward trust cert with a random name, the decryption was running smoothly.
... View more
11-21-2018
08:00 AM
Only default values are enabled: I tested today again and the internet explorer is also affected. Chrome is OK. Seems like Microsoft Browsers have some problems with it.
... View more
11-20-2018
03:12 AM
Hello, We have a problem at one of our new locations with the Edge Browser when using SSL Forward Proxy (PA-220). The problem is as following: When we activate the SSL Forward Proxy, the Edge browser takes very long and sometimes even disconnects when trying to open a normal webpage with TLS. Chrome, Mozilla & Internet explorer are OK. Certificates are also trusted and there are no GPO rules for the Edge browser which could cause problems. I made a packet capture and noticed following: The server key exchange packet comes in, and then the client takes a long time to respond with the client key exchange (~10seconds). Does anybody have an idea what could cause there a problem? As I wrote, other browsers are OK. Thanks and regards
... View more
10-31-2018
06:41 AM
Thanks for your answer. I searched for the active-directory application and saw that we have one rule with it. For testing I deleted the application in the rule and then the FQDN resolve started to work. I thought "ok, weird that this solved it". For testing again, I added the active-directory application to the exact same rule and to my surprise, the FQDN refresh is still working.... So in the end it solved the problem for now but at the same time it was not the trigger. I will monitor it if the refresh will start to fail again.
... View more
10-30-2018
08:53 AM
Hell guys, We have a problem that the FQDN refresh fails nearly everytime. What I mean with "nearly" everytime is, that there are periods in which the FQDN refresh is running smoothly, and then suddenly it fails again. Example: A few days ago the FQDN refresh failed for the 365th time. We then disabled the DNS Proxy because there was something in the logs regarding DNS proxy and then it worked again. Two days later, out of nothing, the FQDN refreshes started failing again. Today early morning at 00:37 the FQDN refresh worked again, and later at 10:12 it started to fail again. No changes in between. (except dynamic updates from PAN) Below you will find the MP logs (manual FQDN refresh). It can resolve all FQDN, but then somehow fails. Does anyone have the same problems? Any tips? Thanks in advance and best regards 2018-10-29 09:15:08.416 +0100 debug: pan_dnscfg_recv_resp(pan_cfg_dnscfg.c:550): dnscfgmod: response received 12, to resolve 12 2018-10-29 09:15:08.416 +0100 debug: pan_dnscfg_recv_resp(pan_cfg_dnscfg.c:559): dnscfgmod: All Fqdns responses received 2018-10-29 09:15:08.416 +0100 debug: pan_dnscfg_resolve_now(pan_cfg_dnscfg.c:3417): dnscfgmod: Done timedwait 2018-10-29 09:15:08.416 +0100 dnscfgmod: Resolving fqdns took 1 secs 2018-10-29 09:15:08.416 +0100 Fqdn refresher thread device requested last config 2018-10-29 09:15:08.429 +0100 debug: pan_cfg_populate_candidate_ids(pan_cfg_commit_jobs.c:338): id population started 2018-10-29 09:15:11.904 +0100 debug: pan_comm_lcs_get_next_addr(cs_conn.c:4770): connmgr: >>> pan_comm_lcs_get_next_addr() 2018-10-29 09:15:12.024 +0100 debug: pan_lcsa_tcp_connect_pref_list(src_panos/lcs_agent.c:1488): pan_fd_watcher_wait, time elapsed = 30000 2018-10-29 09:15:12.024 +0100 debug: pan_lcsa_tcp_connect_pref_list(src_panos/lcs_agent.c:1497): timedout from watcher 2018-10-29 09:15:12.024 +0100 debug: pan_lcsa_tcp_connect_pref_list(src_panos/lcs_agent.c:1458): get MIN earliest timeout from conn & pref list = 30000 2018-10-29 09:15:12.179 +0100 Populating id readonly: size: 16777216 nofree_chunk, allocated 3 chunks, chunk size 16777216 alloc usage 46829131 max. usage 46829131 2018-10-29 09:15:12.189 +0100 shm alloc(read-only) 'pan_shm_base' size 104172048 2018-10-29 09:15:12.189 +0100 debug: pan_config_populate_vrouter(pan_config_handler.c:342): populate vrouter name = default found with id 1 2018-10-29 09:15:12.196 +0100 Warning: pan_config_populate_global_app(pan_config_handler.c:631): application active-directory has the same id 4 as active-directory-base. 2018-10-29 09:15:12.197 +0100 Error: pan_shmgr_add_mmap(pan_shmgr.c:1467): readonly shmgr, can't create id 2018-10-29 09:15:12.197 +0100 Error: __pan_shmgr_preprocess_obj_type(pan_shmgr.c:1630): func(type 9) failed: Error: Error inserting shared-application id for 'active-directory' (4) 2018-10-29 09:15:12.197 +0100 Error: __pan_shmgr_preprocess_obj_type(pan_shmgr.c:1673): __pan_shmgr_preprocess_obj_type(entry:i) failed 2018-10-29 09:15:12.197 +0100 Error: __pan_shmgr_preprocess_obj_type(pan_shmgr.c:1673): __pan_shmgr_preprocess_obj_type(application) failed 2018-10-29 09:15:12.197 +0100 Error: pan_config_populate_id_readonly(pan_config_handler.c:794): pan_config_preprocess_obj() failed 2018-10-29 09:15:12.221 +0100 Error: pan_cfg_populate_candidate_ids(pan_cfg_commit_jobs.c:342): Unable to populate ids into the config: Error: Error inserting shared-application id for 'active-directory' (4) 2018-10-29 09:15:12.224 +0100 Error: pan_cfg_get_lastcfg_fqdnrefresh(pan_cfg_commit_jobs.c:753): Unable to populate ids into candidate config: Error: Error inserting shared-application id for 'active-directory' (4) 2018-10-29 09:15:12.224 +0100 Error: pan_cfg_dnscfg_refresh_fqdns(pan_cfg_dnscfg.c:4416): dnscfgmod: Failed to get valid last config for fqdn refresh 2018-10-29 09:15:12.225 +0100 debug: _pan_cfg_run_query_match(pan_log_handler.c:4776): query match using fsm at index: 0 2018-10-29 09:15:12.225 +0100 debug: pan_logfwd_syslog_handler(pan_logforward.c:1181): Running pan_logfwd_syslog_handler() ... 2018-10-29 09:15:12.225 +0100 debug: pan_logfwd_syslog_handler(pan_logforward.c:1209): subtype: 0 2018-10-29 09:15:12.225 +0100 debug: pan_logfwd_syslog(pan_syslog.c:866): Running pan_logfwd_syslog() ... 2018-10-29 09:15:12.225 +0100 debug: pan_logfwd_email_handler(pan_logforward.c:1669): Running pan_logfwd_email_handler() ... 2018-10-29 09:15:12.225 +0100 debug: pan_logfwd_email_handler(pan_logforward.c:1681): subtype: 0 2018-10-29 09:15:12.225 +0100 debug: pan_get_vsys_dns_from_sysd_obj(pan_dnsproxyd_sysd_api.c:778): DNS_API - sysd 0x1088a700 - vsysname 0x1932182c 2018-10-29 09:15:12.226 +0100 Error: pan_jobmgr_process_job(pan_job_mgr.c:3274): Fqdn Refresh job failed 2018-10-29 09:15:12.226 +0100 debug: _pan_cfg_run_query_match(pan_log_handler.c:4776): query match using fsm at index: 0 2018-10-29 09:15:12.226 +0100 debug: pan_logfwd_syslog_handler(pan_logforward.c:1181): Running pan_logfwd_syslog_handler() ... 2018-10-29 09:15:12.226 +0100 debug: pan_logfwd_syslog_handler(pan_logforward.c:1209): subtype: 0 2018-10-29 09:15:12.226 +0100 debug: pan_logfwd_syslog(pan_syslog.c:866): Running pan_logfwd_syslog() ... 2018-10-29 09:15:12.462 +0100 debug: pan_logfwd_email_handler(pan_logforward.c:1669): Running pan_logfwd_email_handler() ... 2018-10-29 09:15:12.462 +0100 debug: pan_logfwd_email_handler(pan_logforward.c:1681): subtype: 0 2018-10-29 09:15:12.462 +0100 debug: pan_get_vsys_dns_from_sysd_obj(pan_dnsproxyd_sysd_api.c:778): DNS_API - sysd 0x1088a700 - vsysname 0x110d112c 2018-10-29 09:15:15.463 +0100 debug: pan_cfg_handle_op(pan_cfg_op_handler.c:1621): operational cmd target:mgmt complete?:no handler:show_session_timeout_handler 2018-10-29 09:15:15.463 +0100 debug: pan_cfg_execute_mgmtop(pan_ops_common.c:38401): OPCMD show_session_timeout_handler 2018-10-29 09:15:15.629 +0100 debug: _pan_cfg_exec_ctxt_init(pan_cfg_engine.c:2177): effective xpath is:/config/devices/entry[@name='localhost.localdomain']/deviceconfig/system/update-schedule/statistics-service/threat-prevention-information
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-07-2020
11:41 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks