Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About doug-elliott
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About doug-elliott
22Posts
9Likes
2Solutions
Last Visited
User
Activity
User
Profile
Latest posts by doug-elliott
| Subject | Views | Posted |
|---|---|---|
| 2993 | 09-29-2020 01:35 PM | |
| 3816 | 08-19-2020 07:12 AM | |
| 3824 | 08-19-2020 06:02 AM | |
| 801 | 05-27-2020 08:30 AM | |
| 1572 | 05-20-2020 07:38 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 05-27-2020 08:30 AM | |
| 1 Like | 05-20-2020 07:24 AM | |
| 1 Like | 05-20-2020 07:38 AM | |
| 1 Like | 05-20-2020 05:34 AM | |
| 1 Like | 03-12-2020 08:02 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 2 Likes | |||
| 1 Like | |||
| 5 Likes |
User Badges
Community Statistics
| Member Since | 01-21-2019 05:13 AM |
| Date Last Visited | |
| Posts | 22 |
| Total Likes Received | 9 |
09-29-2020
01:35 PM
I used this document -- https://supportcases.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFoCAK -- and instead of "none" for username in the cert profile, I used `Subject'.
... View more
08-19-2020
07:12 AM
UPDATE: TAC response. For remote user authentication to GlobalProtect portals and gateways, the firewall integrates with MFA vendors using RADIUS and SAML only. As of now, The Google authenticator app is not supported by Palo Alto for multi-factor authentication. Supported MFA vendors are Okta, PingID, RSA token, DUO. Below document explains about the Multi Factor authentication in detail. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmSm https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/authentication/authentication-types/multi-factor-authentication
... View more
08-19-2020
06:02 AM
Same here minus the RADIUS server. If I avoid using two-factor authentication with GlobalProtect to authenticate to the gateway or portal, it should be possible to use GlobalProtect to notify the user about an authentication policy match (UDP message), a Multi Factor Authentication server profile would be sufficient, yes? Specifically, I would like to know how this would work with Google Authenticator.
... View more
05-27-2020
08:30 AM
1 Kudo
Looks to me the potential customer is trying to get a more detailed breakdown by feature on firewall performance. The info you have is that which is documented for hardware platforms by Palo Alto https://www.paloaltonetworks.com/products/product-selection and is general in nature. Not all configurations and environments can be covered in detail without testing the specific implementation. Have you suggested a bakeoff?
... View more
05-20-2020
07:38 AM
1 Kudo
If it is local on Panorama, it will be running the same code as Panorama.
... View more
05-20-2020
07:24 AM
1 Kudo
Same principle applies to Panorama management of firewalls as with log-collectors. Panorama must be at the same level of PAN-OS code or higher.
... View more
05-20-2020
07:01 AM
you might be able to pull the PN cfg into Expedition with the base config from your VM to produce XML for a load merge, API cfg push, or to parse objects from the file for Ansible.
... View more
05-20-2020
05:34 AM
1 Kudo
@gulruthina , the 300E seems to fit between the pa-850 and pa-3220. https://www.paloaltonetworks.com/products/product-comparison.html?chosen=pa-850,pa-3220 Could go either way depending on overall requirements. If you are a partner, check out the competitive intelligence available on the nextwave partner site for additional comparative analysis.
... View more
05-18-2020
06:06 AM
@BPry , @Jim.Fallon , wouldn't it be nice to have a REGEX repository filled with data pattern strings written for Palo Alto? I'm in the same boat where for PAN-OS 9.0, predefined patterns are mentioned to respond to HIPPA but there are none listed. Financial and PII are mostly covered but nothing health related. I need patterns for Medical forms and codes. If we have to write them (ahead of PAN-OS 9.1 DLP subscription use), where can we share them?
... View more
04-30-2020
12:14 PM
Is there an update?
1. Is there a way to pull the VPN config from Checkpoint R80 (.jar file does not) and
2. Can Expedition migrate the VPN configuration?
... View more
- Tags:
- R80 VPN
04-23-2020
09:22 AM
Thank you @dgildelaig , I thought the .jar file was produced by paloalto. The client did not recognize the file's origination and I'm not familiar with Checkpoint. I could not have wished for a better answer.
... View more
04-23-2020
07:33 AM
@dgildelaig , I noticed a new procedure on the Expedition (Exped 1.1.66.2) file import page for Checkpoint R80 or greater. involves uploading and running a .jar file on the mgmt server. do you have any documentation for the new procedure or is it that simple? Also, how do I explain any risks with running the .jar file on a client's mgmt server?
... View more
04-23-2020
06:44 AM
I have a 2 live articles addressing the file export procedure from around April of 2019.
Expedition version 1.1.66.2 shows a new procedure on the Checkpoint R80+ file import page requiring the download, install, and run of a jar file to compile and export files necessary for import into Expedition. The procedure involves uploading and running a .jar file on the client's Checkpoint mgmt server. I need documentation to understand and further explain any risks to the management server and would like more depth on the procedure if anyone has run though it. I would like to do no harm during the process. Anyone have success stories to share?
... View more
03-26-2020
06:46 PM
Thanks for the solution, I found this to be the way to go. As a follow up to the other replies, I made another attempt to downgrade to 9.0.4 with another firewall (the HA partner) by downloading the base and attempting to install 9.0.4. Same result. 9.1.0-h3 was installed as part of a solution template I used from Github. For the replacement firewall, decided to deploy a single firewall at PANOS 9.0.4 and avoid the downgrade. Much better idea so be careful with solution templates and what they deploy. Thanks for your responses.
... View more
03-24-2020
04:45 PM
After Downgrading from PANOS-9.1.0-h3 to PANOS 9.0, in Azure, VM100 fails to accept logon. I've tried twice. Once to base 9.0 and another to 9.0.4 with base downloaded. Is this downgrade path not supported?
... View more
Contact Me
Likes From
| User | Likes Count |
|---|---|
| 1 | |
| 1 | |
| 2 | |
| 1 | |
| 2 |
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
