About Shawverr

Bump for help......... ... View more

@SteveCantwell  That did fix the issue.  Not sure why exactly, but when I fixed the cert it came up in chrome with no issues.   I appreciate your time!  Thanks again. ... View more

@SteveCantwell Hey Steve - I'll try my best to explain, I'm still not great at this stuff yet.   Device > Setup > Management > General Settings >  SSL/TLS Service Profile We have a "management" cert set up for each Palo in the pair.  That cert has to be IP specific pointing to the IP of the Palo management interface.   Does that make sense or are you telling me I have something setup wrong? Eeeeek! ... View more

Maybe???   Switch to scripting mode. In scripting mode, you can copy and paste commands from a text file directly into the CLI. Although you can do this without scripting-mode enabled (up to 20 lines). If you cut-and-paste a block of text into the CLI, examine the output of the lines you pasted. If you see lines that are truncated or generate errors, you may have to re-paste a smaller section of text, or switch to   scripting-mode   admin@PA-3060>   set cli scripting-mode on ... View more

@NewUser786 I think your best bet is for your IT team to help at this point.     All the best! ... View more

@NewUser786  I'm guessing you've already reached out to your IT folks?   I did see the post that you deleted with the logs and honestly from that it looked like you aren't passing a HIP check.  Basically think of a HIP check as a set of criteria your IT folks have set that your device has to meet to be allowed on the network.   As just a "user" you may be limited on your troubleshooting options as you might have to be a local admin on your device in order to do a lot of things.   I don't want to offend you so I'll just assume you know nothing about PC's (like most of my users, haha) and try to help you.   Have you tried uninstalling the client and reinstalling it? ... View more

@NewUser786 Is this for an internal or external gateway?  You didn't give a lot of detail, is this when you are trying to connect from the client?  Are you able to reach the portal with a browser?    Generally speaking, as long as your pointing your stuff to the correct IP, you should be fine: Network > GlobalProtect > Portals > (Your Portal Name) > General > Network Settings > IPv4 Address   What are the client logs telling you? https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaLCAS     ... View more

@OwenFuller LOL!!!!  That's why I decided to post, not because I could help, but I could at least confirm the issue.  Hopefully that helps. ... View more

@fatboy1607 I think so.  I don't do that so I can't be sure, but your right, according to the documentation: Configure BGP  Configure redistribution rules. This rule is used to redistribute host routes and unknown routes that are not on the local RIB to the peer routers. Select Redist Rules and Add a new redistribution rule. Enter the Name of an IP subnet or select a redistribution profile. You can also configure a new redistribution profile if needed. Enable the rule. Enter the route Metric that will be used for the rule. In the Set Origin list, select incomplete, igp, or egp. (Optional) Set MED, local preference, AS path limit, and community values. Click OK.   ... View more

@OwenFuller Welp, you weren't lying.  I set that up on my test palo and was unable to change it back to blank.  Well, I was but only because a saved a snapshot first.  Otherwise I got the same error.   Looks like a bug that needs fixed. ... View more