This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About santonic
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About santonic
06-15-2022
638Posts
178Likes
43Solutions
Jun 15, 2022Last Visited
User
Activity
User
Profile
Latest posts by santonic
| Subject | Views | Posted |
|---|---|---|
| 175 | 05-25-2022 12:15 AM | |
| 253 | 05-23-2022 11:31 PM | |
| 342 | 05-23-2022 02:47 AM | |
| 1409 | 05-23-2022 02:27 AM | |
| 325 | 04-25-2022 12:25 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 05-23-2022 02:27 AM | |
| 1 Like | 04-25-2022 12:25 AM | |
| 1 Like | 04-14-2022 11:13 PM | |
| 5 Likes | 04-07-2022 12:46 AM | |
| 3 Likes | 04-06-2022 03:19 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 5 Likes | |||
| 3 Likes | |||
| 7 Likes | |||
| 2 Likes | |||
| 10 Likes |
User Badges
Community Statistics
| Member Since | 01-26-2011 05:56 AM |
| Date Last Visited | 06-15-2022 04:07 PM |
| Posts | 638 |
| Total Likes Received | 178 |
05-25-2022
12:15 AM
The certificates are marked as non exportable so they can't in a 'normal' way. I know there is a way with MimiKatz... 🙂
... View more
05-23-2022
11:31 PM
Thank you for info @Adrian_Jensen In our case it's fresh installations of Windows 11. First the access with GP works for a couple of days, weeks, months... and then it stops. After that the new client certificate has to be installed and the access starts working again.
... View more
05-23-2022
02:47 AM
Our customer is having issues with GP 5.2.10-6 on Windows 11. They are using client certificates for authentication and after a while a connection fails due to no client certificate present. If we check MMC the certificate is present, valid and has private key. But GP logs say: (P9292-T12792)Error(2290): 05/23/22 07:03:00:014 error = ERROR_WINHTTP_CLIENT_CERT_NO_ACCESS_PRIVATE_KEY (P9292-T12792)Debug(2377): 05/23/22 07:03:00:014 winhttpObj, got ERROR_WINHTTP_CLIENT_CERT_NO_ACCESS_PRIVATE_KEY, clean cert cache now (P9292-T12792)Debug(4578): 05/23/22 07:03:00:014 winhttpobj, cert do not has private key???? clean lastIssuerName now, data = 0000000000000000 There is a reddit post about it: https://www.reddit.com/r/sysadmin/comments/sd3m6v/windows_11_tpm_and_vpn_issue/ But nothing on PA forums or KB. How many ppl are having similar issues? Any more info from PA support about this?
... View more
I would say the only stable version is 9.1. Version 10.0 is also quite OK but for some reason it's going EOL. 10.1. is still buggy as hell. I only have 3 in production and I've been experiencing crashes and bugs on 10.1.4 and 10.1.5-h1
... View more
04-25-2022
12:25 AM
1 Kudo
No, I didn't open a case (yet). Tbh there's so many bugs lately, especially with 10.1, so I'm only opening cases for the most critical ones. Not sure deleting license would help me in my case as I never had old URL license on this box.
... View more
04-14-2022
11:13 PM
1 Kudo
It seems PAN-178194 wasn't resolved even in 10.1.5-h1? I have a new PA-440 (which never had old URL filtering license) with valid Advanced URL license yet the WebUI shows error when on URL filtering object and I can't edit ML settings there.
... View more
04-11-2022
11:54 PM
And they are announcing EOL for 10.0 and forcing everyone to 10.1....
... View more
I have one 10.1.4-h4 in production for a couple of months and I've encountered 2 bugs already so I can't agree it's stable. At the moment I am not recommending upgrade to 10.1 to any of our customers. And with 10.0 going EOL I guess they will have to stay on 9.1 for a while.
... View more
04-06-2022
03:19 AM
3 Kudos
I had this issue in authentication policy where there are luckily not many rules. List the problematic authentication rule in CLI in set format and you will see a line which sets hip-profile to any. Unfortunately you can't just use delete command for hip setting as Pan-OS doesn't expect hip-profile here. So copy the whole existing rule to your favorite text editor, change the rule name to something else, and paste it back without the hip profile line. After checking the new identical rule is in place, delete the original rule and commit
... View more
So we need do downgrade all the (brave) customers from 10.0 to 9.1 which hasn't been marked for end-of-life yet? And when 10.1 eventually becomes stable we have to upgrade via then unsupported version 10.0?
... View more
Does this licence already include standard URL Filtering licence? Or you need to purchase both?
... View more
08-17-2021
11:47 PM
1 Kudo
Haha, true that. Tho I've seen different variatons to derive username from name and surname 😉 But I assume in OP's case it's just a radius proxy for MFA which uses LDAP as source of identities anyway.
... View more
08-17-2021
01:57 AM
1 Kudo
@MickBall Was thinking about this once, but never tried it. Can you confirm this works? Also usernames between Open LDAP and RADIUS will have to match.
... View more
08-16-2021
03:25 AM
1 Kudo
Yeah, probably. But with all the PA features for writing policy rules (app-id, user-id, zones, rule based profiles...) the mirroring options here would be far superior to any switch.
... View more
08-16-2021
03:12 AM
As far as I know PA can use RADIUS user groups only in authentication profiles (checking if user belongs to certain group after succesful authentication). For security (or any other) policies PA can only use user groups obtained from LDAP servers. So consider switching GP authentication to LDAP.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-15-2022
04:07 PM
|
Likes From
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks