About djohnson229

I want to configure an IPSec VPN tunnel with redundant VPN peers primary peer "A" using tunnel1 and secondary peer "B" (if "A" goes down) using tunnel2.   I can configure failover using Tunnel Monitoring, but my question is "Why are routes to my VPN peer network installed in the routing table using tunnel1 (more preferred) over tunnel2?". I cannot see where we say tunnel1 is the primary, routes via tunnel2 should only be installed if tunnel1 goes down?   Note: I am not considering failover using static route monitoring at this time.   ... View more

Hey girls/guys. My clients on the internal network, talk to a web proxy on the internet that performs SSL forway proxy. This traffic traverses the Palo Alto firewall - we would like the Palo Alto to see inside this traffic for threats,etc. Note: The web proxy must stay - we cannot move this function to the Palo Alto firewall.   Is it possible to import the web proxy CA certificate and private key (the CA on the web proxy that signs certificates for HTTPS websites on the fly) onto the Palo Alto and if so, would the Palo Alto firewall be able to use the CA certificate and private key to see inside the certificates the web proxy creates on the fly?   I'm thinking this is not possible, as the web proxy creates a new certifcate public/private key for each HTTPS website the user visits, and I don't believe the Palo Alto can use the CA certificate and private key to decrypt certificates that it has signed. Would love to hear comments? ... View more

Hey, I have a HA pair of firewalls in SiteA and a HA pair of firewalls in SiteB. SiteA and SiteB seperated by a 1Gb WAN. I have Panorama deployed in HA, one VM in SiteA and one VM in SiteB. I want the firewall in SiteA to send logs "only" to the Panorama VM in SiteA, similarly I want the firewall in SiteB to send logs "only" to the Panorama VM in SiteB - this keeps logs off my WAN. To enable me to do this, I was considering using Local Log Collectors.   My questions; Assuming I log into SiteA Panorama VM (because its Active), does this display real-time logs seen on the SiteB firewall? Remember, the SiteB firewall does NOT send logs to the SiteA Panorama VM. Assuming the answer to the above is yes, how does this work? SiteB FW is not sending logs to SiteA Panorama? Maybe the Panorama VMs sync logs between themselves, but then you lose the WAN bandwidth saving? Maybe the SiteA Panorama is just an interface displaying logs on SiteB Log Collector but doesn't actually have the logs itself? Thoughts?   Thanks in advance!   DJ ... View more

Hi. If my FW is doing SSH decryption and sending all decrypted traffic out of a mirror port where my Kali machine is, what tools would be able to "read" the username/password from the decrypted SSH traffic?   I was looking for something similar to what "dsniff" does for telnet;   TELNET : 10.1.1.1:23 -> USER: myuser PASS: mypassword   So basically, something similar to the above but for SSH. I was thinking this would be easy, as the traffic is already decrypted but I have spent a while Googling this with no joy.   Can anyone point me in the right direction?   DJ ... View more