About legeremt

legeremt · ‎05-30-2014

Thank you all who responded. When I disabled IPSec my performance increased significantly. Uploading a 12 MB file to my corporate network now takes 1 minutes instead of 6 minutes. Are there any disadvantages to using SSL instead of IPSec that anyone know of?

legeremt · ‎05-29-2014

Is anyone that is using GlobalProtect seeing significant performance issues? We are running PAN OS 5.0.10 and GP 1.2.8. We are also doing full tunnel. When I do a speed test from home without GP enabled I get 20 Mbps down and 5 Mbps up. With GP enabled I get 5 Mbps down and 0.25 Mbps down. Now I understand that I should be seeing some impact of having my traffic being back-hauled to our PAN device but this much? Additionally, when I upload a file from my GP client device to our corporate network, a 12 MB file takes ~6 minutes to upload. Using our other VPN solution the same task takes 30 seconds. Anyone else having an experience similar to this or have any answers? Thanks in advance.

legeremt · ‎12-05-2012

Hello, anyone have success connecting a Blackberry Playbook via IPSec/L2TP VPN? Would be very appreciative if anyone has any info. Thanks, Matt

legeremt · ‎01-30-2012

Thanks RNC. This was exactly what I was looking for. I had seen the "set" commands in the CLI guide but there was not much for explanation/detail/examples. After some more trial and error and speaking with a great new engineer with PAN support I was able to achieve what I wanted. Thanks again.

legeremt · ‎01-09-2012

We did not use the migration tool as we wanted to build from scratch (to avoid importing 15 years worth of "old" objects and rules). So, we want to be able to create hundreds of new address objects. If there was a way of using XML API to make it easier that would be great. As for doing something via the CLI, I have a vague idea as to what you are saying. One thing that comes to mind though is the CLI command "set address" does not seem have the options for a description or more importantly the option to specify an object as "shared". If these options are possible to be included in the command, is it possible to script from a text file? Thanks

legeremt · ‎01-06-2012

We need to create a large number host objects (i.e. IP address objects). Tech support only pointed us to a KP article "Using the XML API" which is Greek to me. Does anyone have any suggestions/solutions? I would think that someone would have needed to do this before me and found a way. Thanks.

legeremt · ‎08-03-2011

Our network has 10 Windows child domains. We have a UIA installed on 2 Domain Controllers (mix of 2003/2008 Windows Servers) in each child domain. On about 8 of our 20 UIAs we have had the UIA process stop unexpectedly or not start up automatically after a server reboot. Event logs are not pointing to the issue. We are using port 55555 for the communication between the PAN FW and the UIAs and have not noticed a port conflict. Has anyone experienced these issues to any degree? Any suggestions on how to eliminate this issue? We are using the current UIA (3.1.2) and PAN OS 4.0.4. We had the same issue when we were on 3.1.8. Thanks.

Date Registered	‎02-21-2011 03:37 AM
Date Last Visited	‎02-12-2016 02:19 PM
Total Messages Posted	7

Online Status	Offline
Date Last Visited	‎02-12-2016 02:19 PM

About legeremt

Re: GlobalProtect slowness

GlobalProtect slowness

VPN using a Blackberry Playbook

Re: Bulk creation of host objects

Re: Bulk creation of host objects

Re: Disable an IPSec Tunnel

Re: GlobalProtect slowness

GlobalProtect slowness

VPN using a Blackberry Playbook

Re: Bulk creation of host objects

Re: Bulk creation of host objects

Bulk creation of host objects

UIA stopping unexpectedly and not starting automatically after a reboot

Strata

Prisma

Cortex

About legeremt