About DerarAbubaker

Hello All,   I have filled the local database with users because we do not have an Active Directory, i create a captive portal to enforce the users to do authentication. in the polices i have grouped the users depends on what they should go through network.  I need to know if there is any way to limit the bandwidth for wan connections depends on the polices so i can limit the user bandwidth depends on the polices they are located in.   Is it ok to use the local DB for 50 users or may i face problems in future the FW is PA220. ... View more

Hello,   I have a network with two WAN connections, i have assigned one of them for a vlan 10 and the other for vlan 20 using two VR and NATing also i created dhcp server for both vlan and for now every thing works fine, the problem is i can't access the resources in vlan 20 from vlan 10 and vise versa, what should i do also? should i create a static route between them and how? What i am missing here?   In VR1 i create a default route 0.0.0.0/0 to 192.168.110.2 In VR2 i create a default route 0.0.0.0/0 to 192.168.120.2   interface 1/1 192.168.110.1 interface 1/2 192.168.120.1 interface 1/3 no ip Subinterface 1/3.10 192.168.10.1 Subinterface 1/3.20 192.168.20.1   Nat from zone vlan-10 to outside zone with ip 192.168.110.1 Nat from zone vlan-20 to outside zone with ip 192.168.120.1     ... View more

Hi all,   I am facing a problem with the global protect mobile app, when i put the username and password for a predefiend user the user login and logout suddenlly at the same time. on the firewall monitor --- system it is appeared that the user successfully login and successfully logout at the same time!!! What is the problem here where could i search for the problem?   I have attached a screen shot for my monitor. ... View more

Hi All,   I have a users who plan to connect their phones (To use a soft phone app for the PABX) and laptops to the internal network from outside, i have setup the global connect gateway and portal and tried to use self signed cert but it is not working, now i need to use a CA to generate a signed certificate and i have two questions: 1. Which CA do you recommend if you have do this before? 2. Should i have root and identity certificates? ... View more

Hello All,   I need a help in my case, i have a bunch of urls which must be permitted and any thing else must be denied. so i create a white list url using the (Custom Objects - URL Filtering) and then i create a URL Security Profile and blocked every categories and just alert my URL Filtering white list and then add it to my (Inside to Outside) policy.   The problem is here when i monitor the url filtering i found some of my urls are blocked beacuse it is exist in another categories like (Computer-and-Internet-info),  i think because of URL filtering order which describe that the order first for the blocked list then the allow list then the custom categories.   Any one face this problem before and if there any tricks to jumb over the order and mke this happen.   I tried to add my custom object directly to my policy and not to use the profile but in this case i can't know the url which will be blocked and in some times i need this to monitor my urls and to know if i need to open some more urls related to our network activity. ... View more