This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
About COlson
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About COlson
03-02-2023
25Posts
2Likes
2Solutions
Mar 02, 2023Last Visited
User
Activity
User
Profile
Latest posts by COlson
| Subject | Views | Posted |
|---|---|---|
| 893 | 06-22-2022 10:42 AM | |
| 1028 | 06-08-2022 01:33 PM | |
| 1060 | 04-23-2022 05:40 PM | |
| 1272 | 04-13-2022 05:58 PM | |
| 933 | 01-07-2022 11:24 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 12-07-2020 07:11 AM | |
| 1 Like | 01-07-2022 11:24 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 05-10-2019 02:15 PM |
| Date Last Visited | 03-02-2023 10:42 PM |
| Posts | 25 |
| Total Likes Received | 2 |
06-22-2022
10:42 AM
Hello, Turns out there's a key part of using HIP matching that should probably be mentioned first instead of buried deeper in articles; you need to have User-ID enabled on the zone. Once that was enabled it worked fine.
... View more
06-08-2022
01:33 PM
Hello, I am testing out using HIP match for certain traffic but I am running into an issue where traffic continues to be blocked. I can see the HIP information in the log and firewalls has GP Gateway license. Originally tried to use HIP for just Anti-Malware 'Is Installed' and has 'Real Time Protection' and the traffic never passed even though in the HIP log I can see both of these being good. So then I just tried to use host information and host contains "Microsoft" (I am using a Windows 10 machine to test) and again traffic fails despite the HIP log showing the machine is Windows 10. If I remove the HIP profile from the security policy, the traffic passes without issue. I have now tested with different categories in the HIP object, testing different client machines to see if something was unusual but it doesn't matter, if the HIP Profile is in use, traffic is blocked. Is anyone familiar with what might cause the HIP information to match but traffic still not pass as expected? Thank you.
... View more
04-23-2022
05:40 PM
Hi, I could set it to IKEv2 only but the same problem arises; as soon as the the two firewalls are on different versions of PAN-OS, IKEv2 fails. I would have thought that would be the use case for IKEv2 preferred but it doesn’t seem it.
... View more
04-13-2022
05:58 PM
Hello, I’ve recently ran into an issue where I’m using IKEv2 preferred and the two firewalls are using different versions of PAN-OS. It will fail with “invalid sig.”. If both firewalls are the same PAN-OS version (this has been happening on 9.1.11-9.1-13h3… I don’t have any other versions to test), it works fine. But since I can’t update all firewalls at the same time, there are periods of time where they are different versions and that results in the tunnel dropping. Additionally, as I’m using IKEv2 preferred, I assumed that when IKEv2 failed, it would use IKEv1 but that doesn’t seem to be the case. Are both of these expected behaviors? There must be something I am missing. Thanks.
... View more
01-07-2022
11:24 AM
1 Kudo
Hello, I am trying to troubleshoot an error in a traffic log regarding cert decryption. I have found an article from PA on it: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boONCAY but I am unable to reproduce the steps to help in troubleshooting. The fourth bullet says 'Dataplane Debug shows the following..." and I would like to see a log just they show in the example but I'm not sure where that is. The log features it references I'm familiar with for packet capture but packet capture doesn't look the example they provided. Can someone point me in the right direction of how I can reproduce that screen? Thanks.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-02-2023
10:42 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks