Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
04-29-2019
22Posts
8Likes
5Solutions
Apr 29, 2019Last Visited
User
Activity
User
Profile
Latest posts by schiang1
| Subject | Views | Posted |
|---|---|---|
| 364 | 01-23-2012 05:32 PM | |
| 422 | 11-21-2011 12:10 PM | |
| 282 | 11-15-2011 12:30 AM | |
| 244 | 11-14-2011 11:54 PM | |
| 756 | 11-14-2011 11:39 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 11-11-2011 09:16 AM | |
| 1 | 06-06-2011 09:13 PM | |
| 1 | 05-24-2011 10:06 PM | |
| 1 | 11-11-2011 08:54 AM | |
| 1 | 11-14-2011 11:54 PM |
User Badges
Public Statistics
| Date Registered | 02-02-2011 05:21 PM |
| Date Last Visited | 04-29-2019 12:44 PM |
| Total Messages Posted | 28 |
| Total Likes Received | 8 |
01-23-2012
05:32 PM
1 Kudo
I assume you are talking about inbound SSL inspection and the OWA server sits behind the Palo Alto Network's firewall. In order to decrypt the inbound SSL traffic, the private key and certificate is also installed on the firewall in which case all those SSL certificate types should work.
... View more
11-21-2011
12:10 PM
In 4.1 we've consolidated NetConnect and GlobalProtect – The feature set of NetConnect has been integrated into GlobalProtect. GlobalProtect in its base functionality now replaces NetConnect. Apple iOS devices can now establish IPSec connections using the native iOS IPSec client to a GlobalProtect gateway. GlobalProtect Configuration for Apple iOS Devices https://live.paloaltonetworks.com/docs/DOC-1972 Hope that helps. Cheers Scott
... View more
11-15-2011
12:30 AM
1. two factor authentication OTP solutions would be supported by the PAN via RADIUS. As far as two auth without OTP, if you have PKI in your environment you could use smartcards or certificates with private key password protected. 2. create two auth profiles,one with the AD admin user group in the allow list and the other with the operator AD user group in the allow list. Then create two administrators using one of the auth profiles and select the appropriate admin role (i.e. superuser or read-only)
... View more
11-14-2011
11:54 PM
1 Kudo
Panorama will buffer the logs if there is loss of connectivity to a device. I believe buffered log forwarding from device is enabled by default.
... View more
11-14-2011
11:39 PM
In the Global Protect portal Client configuration you can either 1. Enable the On demand option. However, w ith this setting enabled the GlobalProtect agent will not automatically connect to the gateway. instead the user will have to manually connect to the gateway by clicking the agent icon. But it does give you the disconnect option. (Network tab > GlobalProtect> Portals > Client Configuration tab > General tab) or 2. Enable the Agent UI and set the agent user override to with comment. This allows the end user to disable the agent on the PC with comment. You may have configured it to disabled (Network tab > GlobalProtect> Portals > Client Configuration tab > Advanced tab) re:passwords In the Agent UI you can disable user can save password do you have single sign on enabled? if yes, then t he agent will use your Windows credentials to authenticate to the GlobalProtect portal. This can be disabled as well Here's the Quick Start Guide Global Protect for reference: https://live.paloaltonetworks.com/docs/DOC-1757
... View more
11-14-2011
11:15 PM
In the Global Protect portal Client configuration, 1. Make sure On demand option is not enabled (Network tab > GlobalProtect> Portals > Client Configuration tab > General tab) 2. Enable the Agent UI and set the agent user override to disabled. (Network tab > GlobalProtect> Portals > Client Configuration tab > Advanced tab)
... View more
11-11-2011
09:16 AM
1 Kudo
you will define the ip address or host name for the redirect and it will be https:// Please check out the How to configure Captive Portal doc for additional information https://live.paloaltonetworks.com/docs/DOC-1159
... View more
11-10-2011
08:34 AM
World of Warcraft uses bittorrent for updating. Try adding the destinations of some of their servers to restrict the bittorrent use. Also follow up with support to see if they have any other suggestions or fixes planned
... View more
10-27-2011
07:12 AM
1 Kudo
About the only thing you can do is launch Netconnect From a windows command prompt: C:\Program Files\Palo Alto Networks\Pan Connect>PanConnect For any additional commands or functonality, Please reach out to your Palo Alto SE to file a feature request
... View more
10-19-2011
05:40 PM
correct, download OpenSSL to generate the CSR and submit it to VeriSign https://live.paloaltonetworks.com/docs/DOC-1246
... View more
10-19-2011
08:26 AM
There is a 160gb hard drive on the PA-2050. The number of days would depend on how much traffic is passing through the box and the size of the logs. The logs fill the disk and when nearly full, the PAN deletes the older logs. These alerts are associated with the default Disk Quota settings/thresholds set (Under Device Tab->'Edit Session Management'): In a nutshell: - The Traffic Disk Quota is set @ 38.123 GB - The Alarm Threshold is set @ 90% of 38.123GB, which = 34.3107GB (MB equivalent being 39037MB) - The Traffic DB Disk allocates 38.9GB for Logs & Index, which (if fully utilized) exceeds the 90% threshold associated with the Disk Quota @ 38.123GB. (Though this actual # fluctuates following log purges) there is a bug fix in the works regarding this particular alert/threshold comparison which should be available in upcoming release
... View more
10-18-2011
02:40 PM
Renato, Do you have virtual systems configured? re:max rules, I noticed that too. I believe this is also related and configured per vsys. Thanks sc
... View more
10-17-2011
02:07 PM
1 Kudo
> show resource limit policies | match NAT This will display the current NAT rules configured
... View more
06-06-2011
09:13 PM
1 Kudo
Netflow is not really application aware...The pre-defined reports as well as custom reports give a nice overview on apps in the network (applications, ports, bandwidth, vulnerabilities and virus). BTW NetFlow is not currently supported in the PAN OS.
... View more
06-06-2011
08:27 PM
show session all filter source x.x.x.x destination y.y.y.y What does the application get identified as? Maybe try: Pattern Match: Context: ssl-rsp-certificate, pattern server.domain\.com
... View more
05-28-2011
11:22 AM
Are you able to manually run the pdf summary reports (Monitor tab > Reports > PDF Summary Reports) by selecting dates from the calendar? Try re-creating the pdf summary report and either add it to the existing report goup or create a new report group and see if that makes any difference
... View more
05-28-2011
10:47 AM
It looks like we are able to contact the OCSP responder and get the correct certificate status. It's not clear from your posts whether a revoked certificate is being allowed or timing out? Do valid certificates work and and do we log the correct response? Are your results similar or different with IE? Have you tried just CRL checking? I would expect that if a revoked certificate is presented that we would not allow it and present a page saying it is revoked. What version PANOS are you running?
... View more
05-24-2011
10:52 PM
Do the downloads work without a file blocking profile enabled? Do you also have a URL filtering profile enabled? It sounds like some of the content is being blocked by your URL filtering profile. Take a look at the URL filtering logs when attempting a download from cnet for clues to what is being blocked.
... View more
05-24-2011
10:42 PM
We do not seem to populate the list of IP addresses to not decrypt when users only join the meetings. The reason is that ssl sessions don't include
the common name in the response. We're still investigating
... View more
05-24-2011
10:06 PM
1 Kudo
use the security rules to do DSCP Marking and a QOS policy to rate limit and place applications into specific queues. To change the Quality of Service (QoS) setting on packets matching the rule, select IP DSCP or IP Precedence and enter the QoS value in binary or select a predefined value from the drop-down list. For more information on QoS, refer to “Configuring Quality of Service” in the admin guide
... View more
05-19-2011
09:08 AM
no there is not. you can only create packet captures for applications, threats and for debugging
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
