Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About santonic
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About santonic
Online
621Posts
158Likes
43Solutions
Jun 17, 2021Last Visited
User
Activity
User
Profile
Latest posts by santonic
| Subject | Views | Posted |
|---|---|---|
| 296 | a month ago | |
| 4927 | 10-16-2020 04:10 AM | |
| 1957 | 07-19-2020 11:07 PM | |
| 618 | 05-04-2020 01:41 AM | |
| 2273 | 05-04-2020 01:31 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 10-16-2020 04:10 AM | |
| 1 Like | a month ago | |
| 1 Like | 01-13-2019 11:28 PM | |
| 1 Like | 05-04-2020 01:41 AM | |
| 1 Like | 02-14-2019 11:03 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes | |||
| 8 Likes | |||
| 1 Like | |||
| 2 Likes | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 01-26-2011 05:56 AM |
| Date Last Visited | 21 hours ago |
| Posts | 621 |
| Total Likes Received | 158 |
a month ago
1 Kudo
The solution from Reddit was just for cases, when gateway was on private (loopback) address and NAT was only configured for TCP 443 and not UDP 4501 (for ESP over UDP). And it wasn't U-turn NAT. I guess there remains an open issue that option which should disable notification about fallback from IPSEC to SSL doesn't disable it even in version 5.2.6? And I believe this option was introduced only in 5.2.5? The main question is; have you noticed that clients previously connecting over IPSEC now connect only over SSL?
... View more
10-16-2020
04:10 AM
1 Kudo
@Diyar.m Ping (ICMP) will survive asymmetric routing, but TCP won't.
... View more
07-19-2020
11:07 PM
Yes, that sounds like a step backwards in 9.1. What is the logic behind this?
... View more
05-04-2020
01:41 AM
1 Kudo
In our demo SD-WAN setup we have a couple of SD-WAN rules for ping traffic and also a catch-all rule for all unmatched traffic. For most of the tested applications everything is fine. But for ping (and traceroute) the SD-WAN policy name field in traffic logs is always empty. The SD-WAN rules for ping are getting hits, also the performance of ping suggests that the SD-WAN policy rule is working (it's directing it over LTE link). Are there any specifics about ping and SD-WAN Policy Name field? Or maybe just a bug? Anyone has similar issue?
... View more
05-04-2020
01:31 AM
I agree with @Josef.Honc and it's a very good question. I am also curious if PA can measure quality of DIA links.
... View more
03-05-2020
03:05 AM
With PBF you could re-route traffic to some destination based on various criteria. That destination has to be a device on connected network. So I don't think that will work for Menlo. PA is not a proxy, so the integration you have in mind won't work. But I am pretty sure PA will do a great job securing your web traffic without any help.
... View more
03-03-2020
11:36 PM
I am following the admin guide: https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/sd-wan/1-0/sd-wan-admin/sd-wan-admin.pdf At first I'm doing it without BGP and on page 58 you can either use Panorama template variables or define static routes directly on FW. And the variables you make you use in destination field which must be of type IP address.
... View more
03-03-2020
05:48 AM
Anyone been trying to setup SD-WAN routing with template variables? Surely that page in admin guide is completely wrong? Variables should be of type IP address.
... View more
01-16-2020
11:20 PM
The scenario is to introduce PA capabilities to the customer (SLR) so we want to put it in TAP mode on north/south traffic.
... View more
01-16-2020
06:48 AM
We have a situation where we can't get all the mirrored traffic to the same interface. But as it's asynchronour souting nevironment a packet can be mirrored to one interface and the reply to the other. So we need to connect 2 PA TAP interfaces to capture whole sessions. The question is will PA match the packets into same session if we put both interfaces into the same security zone?
... View more
- Tags:
- tap
11-20-2019
11:33 PM
Yeah, logs are fine. So we assumed it's ok. Just wanted to be sure so it doesn't bite us some time later.
... View more
11-19-2019
12:22 AM
Scenario: Panorama (in Panorama mode) with single local Log Collector A/A cluster of firewalls managed by this Panorama We managed to change the master key on Panorama and both firewalls. But trying to change the master key of the single local Log Collector on this same Panorama fails with "Failed to schedule deploy masterkey job". Is it even neccessary to change this master key in this scenario where Log Collector is on the same (virtual) appliance as Panorama?
... View more
10-14-2019
03:27 AM
Even though 9.0.4 is already out I still don't recommend using this version in production. I've seen some really weird and annoying bugs on all 9.0 releases so far. I must say this is by far the buggiest release ever from PA.
... View more
09-30-2019
02:46 AM
Yeah, in the end I went for 2 VR option as well and it works well.
... View more
09-11-2019
01:29 AM
Good stuff! Thanx!
... View more
Contact Me
| Online Status |
Online
|
| Date Last Visited |
21 hours ago
|
Likes Given To
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
