This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About tcleghorn
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About tcleghorn
09-22-2023
6Posts
1Like
1Solution
Sep 22, 2023Last Visited
User
Activity
User
Profile
Latest posts by tcleghorn
| Subject | Views | Posted |
|---|---|---|
| 2273 | 08-24-2020 07:44 AM | |
| 10400 | 07-23-2020 05:30 PM | |
| 1908 | 06-11-2020 10:00 AM | |
| 2095 | 06-09-2020 10:22 AM | |
| 2168 | 06-09-2020 10:15 AM | |
| 2037 | 06-09-2020 09:53 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 07-23-2020 05:30 PM |
User Badges
Community Statistics
| Member Since | 04-03-2019 08:05 AM |
| Date Last Visited | 09-22-2023 10:16 AM |
| Posts | 6 |
| Total Likes Received | 1 |
08-24-2020
07:44 AM
I was wondering why my tab wasn't there as well. I was logged in as a Superuser (built-in account). No other user I put in as Superuser, Superuser (ReadOnly) or any other User could see the ACC. Context switch from Panorama could not see the ACC either (although Panorama did have the ACC tab). It turns out that the VM-50 Lite does not have the ACC tab: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-new-features/virtualization-features/vm-50-lite To get ACC, you'll have to use Panorama with VM-50 Lites.
... View more
07-23-2020
05:30 PM
1 Kudo
This is by design. If you allow a user to connect using Credential OR Client Cert, we'd need a username from the client cert. A workaround is to set the User Name in the Certificate Profile to using the Subject Alt Name of the Certificate. When you generate the Machine Certificate for the Pre-Logon, do NOT put anything in the Subject Alt Name field. This should allow both Machine Cert users (without Cookies) and non-Machine Cert users. Best practice would be to set-up 2 Portals and 2 Gateways. One with the CertProfile (for your domain trusted machines) and one without (for your contractors).
... View more
06-11-2020
10:00 AM
https://docs.paloaltonetworks.com/globalprotect/8-1/globalprotect-admin/authentication/configure-globalprotect-to-facilitate-multi-factor-authentication-notifications.html Take a look through there to see if that helps. Step 6>3 may be what you need: Set Enable Inbound Authentication Prompts from MFA Gateways to Yes . Also, DUO has a pretty good step-by-step on setting-up with GP: https://duo.com/docs/paloalto
... View more
06-09-2020
10:22 AM
https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-overview/about-globalprotect-licenses.html You do need a license for Application Split Tunneling to work.
... View more
06-09-2020
10:15 AM
In this case, WAN-IP is the Name of the Gateway that the GP Client was trying to connect to. There can be problems when there is a proxy on the local (GP Client) network. If others were having the same issue at the same time, that would indicate the Gateway was unreachable (maybe ISP down, a bad security policy dropping TCP 443/UDP 4501 connections to the Gateway, etc.)
... View more
06-09-2020
09:53 AM
The Gateway uses port 4501. If you are using a custom port (say port 8000) then you will need to put the Gateway on a Loopback, and create a Destination NAT from Public IP:8000 to Loopback IP:4501. Remember that it's the Portal>Satellite config that gives-out the Gateway, so on that config is where you would put the Gateway s Public IP:8000 so that the Satellite will go to Public IP:8000 for the IPSEC connection. If you're also trying to connect the Portal on a custom port (9000), that always listens on port 443. So you would put the Portal on a Loopback, and Destination NAT from Public IP:9000 to Loopback IP:443. Set the Satellite IPSEC connection to connect to Public IP:9000.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-22-2023
10:16 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks