About Stevenjwilliams83

Looking to see if anyone has configured Prisma Access with OneLogin? I am looking for the parameters needed for the ACS consumer URL and Validator.  ... View more

Sometimes I feel Panorama is a great tool, sometimes I rather manage firewalls locally and just API for mass pushes and deployments.   I had a firewall that was overridden in a few places and wanted to get this back in sync with panorama. So I followed this article:   https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008UIPCA2&lang=en_US%E2%80%A9   it seems after all this reading and following these instructions all the sections on my local firewall are overridden now....why?     ... View more

I am trying to bulk add address objects to panorama instance in AWS using the panos for terraform and keep getting errors about the plugin. Can you use panos with terraform to push address objects via API to cloud instances or is there another way you are to do this? Or is this something that cannot be done period?   initializing provider plugins... - Finding latest version of hashicorp/panos... Error: Failed to query available provider packages Could not retrieve the list of available versions for provider hashicorp/panos: provider registry registry.terraform.io does not have a provider named registry.terraform.io/hashicorp/panos If you have just upgraded directly from Terraform v0.12 to Terraform v0.14 then please upgrade to Terraform v0.13 first and follow the upgrade guide for that release, which might help you address this problem. Did you intend to use paloaltonetworks/panos? If so, you must specify that source address in each module which requires that provider. To see which modules are currently depending on hashicorp/panos, run the following command: terraform providers ... View more

I have been trying to get this to work for days not and I am not getting anywhere. I always seem to struggle with certs due to how they are chained.    On my Palo I have a rootca (self-signed, certificate authority), intermediateca (issued by rootca, and also certificate authority), then I cut a cert called gp-cert (issued by intermediateca, non certificate authority).    My cert profile includes the intermediateca and the SSL/TLS SP includes the gp-cert.    I have downloaded the intermediateca cert without private key in PEM format and exported the gp-cert with private key in PSK12 format.   My DNS name for my gatway/portal lets say is vpn.company.com   vpn.company.com is the CN for the gp-cert   I upload these to my iPhone11 and when I attempt to connect I get an error:   Cannot verify server identity There is a problem with the security certificate. The identity of vpn.company.com cannot be verified.    My options are cancel or detail.   Detail gives me the certificate details and thats it.    I always remember I could click continue when this happens so did something change in iOS or is this an issue with my certs and how I have them chained or exported, or even signed?      ... View more