Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About dpeterson4
About dpeterson4
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
12-06-2019
17Posts
0Likes
0Solutions
Dec 06, 2019Last Visited
User
Activity
User
Profile
Latest posts by dpeterson4
| Subject | Views | Posted |
|---|---|---|
| 668 | 12-02-2019 02:18 PM | |
| 3015 | 12-02-2019 02:16 PM | |
| 758 | 11-22-2019 11:42 AM | |
| 415 | 10-04-2019 11:36 AM | |
| 1279 | 07-02-2019 08:41 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 3 |
User Badges
Public Statistics
| Date Registered | 11-01-2018 12:10 PM |
| Date Last Visited | 12-06-2019 10:52 AM |
| Total Messages Posted | 17 |
12-02-2019
02:18 PM
We have configured both primary and secondary DNS servers as well as suffix's.
... View more
12-02-2019
02:16 PM
Hello, We ran into this same issue. We had to add a special registry key. Problem is cause by weakhostsend in windows or some cases it was a DNS issue. We had to add the following registry key. Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\Settings\post-vpn-connect Name: command Data: powershell -Command "Get-WmiObject win32_networkadapter | where-object NetConnectionStatus -eq 2 | where-object ServiceName -ne PanGpd | ForEach {netsh interface ipv4 set interface $_.InterfaceIndex weakhostsend=disabled}"
... View more
11-22-2019
11:42 AM
Hello all, Just throwing this out there to see if anyone has seen similar issues. Over the last 6 months we have been having intermittent drive mapping issues on clients that have Global Protect installed. All the clients have Win 10 on them and we have global protect 5.0.5 installed. The drives are mapped using group policy and in trying to get some answers from Microsoft we haven't gotten anywhere. Has anyone else run into this issue with clients on Win 10 using global protect? Also, we have Global Protect set up with Pre-Logon always-On, with Internal Host Detection but no internal gateways. External Portal and Gateway share IP. Thank you, -Dustin
... View more
10-04-2019
11:36 AM
All of the sudden, in our global protect setup(Pre-Logon-Always-On, internal host detection, we were able to switch between internal and external networks and Global Protect would always reconnect. For about a month this has not been working. I got around to looking at the logs and see the following: (T14316) Debug(4604): All external gateways are manual only. This is not the case as we only have one external gateway configured and it is not set to manual. The portal and gateway are configured on the same PAN 5250 device with PanOS8.1.9 Has anyone seen this lately or know why the client is saying this even though it's not configured that way on the PAN? Thank you.
... View more
- Tags:
- global protect
07-02-2019
08:41 AM
I'm trying to create an internal gateway to be able to capture User ID fully and start creating User ID based rules. I created the dns records and put the gateway on a loopback interface on the firewall that is in the internal trusted zone. I have done the cert work and confirmed that the name resolution is working. When looking at the logs it says "Failed to ssl connect to 'ip address' . When looking at the connection tab on the global protect client it is showing both the internal and external gateways but it's not showing authenticated on either. When I connected to an external network the external gateway connects and authenticates so I believe at least the Portal is working.
... View more
05-30-2019
08:15 AM
The path to the registry setting is here. Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\Settings The key value is connect-method The value data is either on-demand, pre-logon, or user-logon
... View more
05-15-2019
06:45 AM
Awesome, thanks for the info!
... View more
05-15-2019
06:20 AM
Does that pre-logon tunnel connect on a newly imaged machine? I thought the user had to log in first to get that to work.
... View more
05-15-2019
06:18 AM
There are multiple ways to get this. If you are just doing it one time, you can look at the system logs and use the following search filter (eventid eq globalprotectportal-config-succ). This could take a really long time depending on how long you keep logs for some might want to also add a date filter like (receive_time in last-30-days). Also you can use the API using the following https://"Firewall URL"/api/?type=op&cmd=<show><global-protect-gateway><previous-user/> </global-protect-gateway>
... View more
05-15-2019
05:59 AM
Hello, Been trying to look around about how to do this but not finding anything. So we are moving from AnyConnect to Global Protect. The transition has been fairly smooth but ran into a unique issue yesterday. We have a small number of user's who are remote who can't come into the office and they are getting a new laptop shipped to them. In the past they were able to use AnyConnect to log into the VPN before logging into the PC because they didn't have any cached credentials. How do I set up the same thing in global protect? Thank you, -Dustin
... View more
12-27-2018
01:52 PM
Awesome!! You rock, that did it, thank you!!
... View more
12-27-2018
01:05 PM
@BPry Thanks for the info! Got that to work but it's only returning 20 log entries and there are over 600. Any idea on how to get it to show all of them? Thank you, -Dustin
... View more
12-27-2018
11:55 AM
Have been looking around trying to find this and can't find it. I have a filter for system logs to filter all the successfull Global Protect logins for the last calendar week. I have been manually exporting this to a csv but wanted to schedule the process to email the csv out. Is there any way to do this?
... View more
11-19-2018
08:25 AM
This might be a good starting point. https://github.com/PaloAltoNetworks/ansible-pan
... View more
11-19-2018
08:13 AM
According to that other post, looks like at the end of the code they are adding devices&element=<entry> @name="SerialNumber" </entry> Have you tried that or some variation of that?
... View more
11-01-2018
12:27 PM
Anyone had any luck with the following API call. Trying to make front end for the helpdesk to be able to generate tickets to disable global protect if needed. api/?type=op&cmd=<request><global-protect-portal><ticket><request></request></ticket></global-protect-portal></request>&key=APIKEY I keep getting the following response <response status="error"> <msg> <line> op command for client sslvpn timed out as client is not available </line> </msg> </response> Any help would be appreciated. Thank you, -Dustin
... View more
11-01-2018
12:21 PM
They are pretty wide open. You can browse the availble api calls by going to your browser and typing in your pan URL followed by /api.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
12-06-2019
10:52 AM
|
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
