About jsayer

Recently I've been seeing the URL Filter overrides stop working at two customer sites.  Both are running older code (8.0), but sites that are in the Override Allow List are no longer being permitted.  These firewalls are also having difficulty installing the latest content databases, etc. since 9/21.  Had to create a new policy for specific users to bypass the URL filtering at the first customer.  I've now upgraded the firewalls at this customer but haven't reinstated the URL filtering as of yet.  I will be upgrading the firewalls at the other customer this weekend.  Hopefully that will resolve this issue, but curious if anyone has seen a similar issue. ... View more

PA Support Engineer discovered that the commit failure occurs when the setting for Client Authentication is set to "Yes (User Credentials OR Client Certificate Required)".  this appears both in the portal and gateway settings I believe.  Changed this to "No (User Credentials AND Client Certificate Required)" and the commit was successful.  This appears to be a new option in 9.0 that was not available in 8.1.x code.     Trying to decipher the implications of setting that to User Credentials AND Client Certificate.  We want to have the machine connect pre-logon, so not sure whether this setting will cause problems with the desired behavior or not.   ... View more

Seeing the same issue committing with a certificate profile if Username set to None.  Tested this with 8.1.14h2 and commit was successful.  Fails on 9.0.8.  Support engineer tested also on 9.0.6 and saw the same commit failure.   ... View more