This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About GeorgiosFakis
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About GeorgiosFakis
38Posts
2Likes
0Solutions
Last Visited
User
Activity
User
Profile
Latest posts by GeorgiosFakis
| Subject | Views | Posted |
|---|---|---|
| 536 | 02-22-2022 12:12 AM | |
| 305 | 06-03-2021 11:42 PM | |
| 1457 | 06-03-2021 01:56 AM | |
| 995 | 02-09-2021 02:46 AM | |
| 2053 | 09-23-2020 11:57 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 12-07-2019 01:17 AM | |
| 1 Like | 11-27-2019 04:57 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 4 Likes | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 02-05-2019 07:25 AM |
| Date Last Visited | |
| Posts | 38 |
| Total Likes Received | 2 |
02-22-2022
12:12 AM
Hi , Yes that it is but keep in mind your logging will not be correct because the IP mapping will stay in the firewall for a long time. This will might cause issues in your logs for other USER-ID for IP mapping for other zones like server zones where username will stay there. For example , if you have a server let's say that is doing some service and has a service account and you RDP , the logs and the IP mapping will have for everything your username unless someone else RDP the server.
... View more
06-03-2021
11:42 PM
Hi , Are they RDP with the same account like the login username of GP ? Have you defined AD groups in the ACL ? What username is not matching the RDP and the DNS and have you compared that to the username login ? I had the same issue and I deleted the source user AD group because I had users like domain\bob and the RDP was done by domain\admbob.
... View more
06-03-2021
01:56 AM
When the user disconnects from GP there are session that will expire, therefore there is no HIP data at the moment . I have seen in my logs that is matching a "catch" rule DENY for those HIP profiles are not working.
... View more
02-09-2021
02:46 AM
If they do VPN from China outside China then great firewall of China is doing rate limiting . I have seen that to many connections even with Palo Alto networks updates and not only with VPN connections .
... View more
09-23-2020
11:57 PM
Hi , Check the user-id how is formatted in the logs like : domain\bob Then check the traffic logs that you interested and check there the user , it should be something else and that is the reason why Then check the security policy to see if you have domain\bob like the user ID . The HIP collection is taking the username and domain.
... View more
09-23-2020
11:53 PM
Hi , We found around 100 users having this issue where mapped drives had their COMPUTER name like alias and linked to one of the servers for personal host space . Basically , helpdesk instructed them how to change that so the mapped drive have a normal path . I don't know how it was working before with Juniper Pulse but with GP we had issues. All the other mapped drives that was from the AD policy were ok after connecting to GP .
... View more
03-09-2020
02:55 AM
Hi, We tried with one user and didn't work but you know what they say? Pulse Secure was not causing that issues . I have isolated the issue to specific shared folders. All common shared folders they are connected after user connect to global protect.I have asked the server team to check as well these specific shared folders and from what it seems is the sync between host and AD.
... View more
02-27-2020
04:31 AM
Check for MTU issues like counters with MTU exceeded .We have set it up to 1427.
... View more
02-26-2020
11:56 PM
Hi , Users most of them have Windows 10 and they show disconnected .We have not tried to restart this service but what we have tried to access through run command \\shareX\ . We don't have standard mapped drives, each user adds their own for their work.
... View more
02-26-2020
06:47 AM
Hello all , Having issues with some users where they have mapped drives but after they connect to global protect they don't work. If they unmap and they map again it works . When doesn't work after connecting to globalprotect if they ping the IP of the server that they have the mapped drive it works but SMB it doesn't . We have on-demand globalprotect, SSO disabled of course and we allow netbios, SMB and I don't see any blocked traffic. I have tried to search that and I don't want to say to the customer to fix that with scripts net use because all users are using their own shared folders.
... View more
02-26-2020
06:28 AM
Forgot to update We fixed that with disabling the timeout of the user-id but we also upgrade the agents to 5.0.8.
... View more
12-07-2019
01:17 AM
1 Kudo
Palo Alto engineer and myself we were looking the logs . User connected in the morning , opened a UDP session with significant amount of data transimtted and recevied .Was allowed by an ACL in line 35 let's say and after 3 hours Deny ALL acl was matching in line 50 . We see that HIP report was sent and there flags 0x63 & 0x61 on the allowed and deny from the log .We suspect that is related to HIP report .We see that was sent every hour and HIP log is matching the HIP profile every hour .Question is why traffic that elapsed time was 3 hours is mathcing after that time DENY ALL ACL.
... View more
12-06-2019
12:33 AM
PA released version 5.0.6 that fix some HIP issues. Now for the case I have they are still reviewing the files I sent them . From what I see is that : (T20032) 11/28/19 11:18:03:568 Debug(4477): Send hip report check failed I have increased the timeout to 1 day for the HIP report from 3 hours that was set.I will keep you posted .
... View more
- Tags:
- released
12-05-2019
01:06 AM
Hi I have done this but again user reported that next day . I got debugging logs from user and I see it's an issue on HIP report that timed out . I have opened a case with Palo Alto and waiting their availability to check it .
... View more
11-28-2019
02:32 AM
Is set to 45 minutes :
... View more
Contact Me
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks