Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About uduwawalan
About uduwawalan
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
05-15-2020
8Posts
2Likes
0Solutions
May 15, 2020Last Visited
User
Activity
User
Profile
Latest posts by uduwawalan
| Subject | Views | Posted |
|---|---|---|
| 567 | 05-22-2014 12:26 AM | |
| 656 | 05-19-2014 07:51 AM | |
| 2030 | 05-19-2014 06:27 AM | |
| 2159 | 05-14-2014 02:35 AM | |
| 1139 | 05-24-2012 01:23 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 05-19-2014 07:51 AM | |
| 1 | 05-15-2012 02:19 PM |
User Badges
Public Statistics
| Date Registered | 03-24-2011 02:27 AM |
| Date Last Visited | 05-15-2020 05:35 AM |
| Total Messages Posted | 16 |
| Total Likes Received | 2 |
05-22-2014
12:26 AM
HI Mzh, Thanks. Unfortunately that and other clear db statements were the first to tried along with much more aggressive deletion of the DB. The problem re-appears. This is now being investigated by PA. From my understanding, some brightcloud servers across the world don't seem to synchronise their databases reliably all the time. This leads to a situation where on some occasions our box might be forwarding the url category request to a Brightcloud server that doesn't necessarily have all the category data! We then get "unknown" as the result for our query. This is a tentative conclusion and Palalto have asked us to do some wireshark captures to be more conclusive. So for now it's a waiting game.
... View more
05-19-2014
07:51 AM
1 Kudo
Hi, Equipment: PA3020, Software: 6.0.2, Filtering Birghtcloud We have a situation where large numbers of web sites are being categorised as "unknown.". Upon investigation ( case has now been raised with PA), we find that the Test url <url> command will get the correct categorisation. However the user trying to use the same url will be blocked because their session gets the url categorised as "unknown". You can replicate this behaviour by running debug dataplane test url-resolve-path <url> which gets you an "unknown" category. Examples are given below taken out of a console session to our box. admin@PA-3020> test url dashboard.groupcall.com dashboard.groupcall.com business-and-economy (Dynamic db) ----- This is the same categorisation on Brightcloud data base if you visit that web site and do a manual category check. admin@PA-3020> debug dataplane test url-resolve-path dashboard.groupcall.com URL dashboard.groupcall.com/, category unknown admin@PA-3020> test url misguidedchildren.com misguidedchildren.com games (Dynamic db) admin@PA-3020> debug dataplane test url-resolve-path misguidedchildren.com URL misguidedchildren.com/, category unknown So.. any ideas please ? I would lke to investigate this issue and get to the bottom of it. It's affecting our day to day operations and ruining the web experience of a lot students and staff. Thanks for any help.
... View more
05-19-2014
06:27 AM
HI Doris / Numan, Thanks for your input. In a situation where hundreds of pages are getting categorised as unknown it's not feasible for us to ask for categorisation. This is a school with a potential 2000 people trying to browse and getting blocked. Their whole experience is ruined. The whole point of the web and using PALO ALTO at great cost is that you get to where you want when you want on the web safely and securely for our students and staff. Anything less is not ideal and is a potential waste of time. Since posting this request / question, we realised that these same website that are not categorised are categorised largely correctly on Brighcloud and we have switched to brightcloud on a temporary license. Having switched to bright cloud we find that there is further problem where brightcloud categorises a website correctly ( as in Test URL command) but doesn't get translated in to the same category for the user ( as in debug dataplane tes url-resolve-path <url> command). This has dented our confidence very badly and is affecting school activity quite badly. We need a solution to this. From where it's going to come and when is anybody's guess at this minute. Thanks Nalin.
... View more
05-14-2014
02:35 AM
Hi Has anyone experienced this problem and found a solution for it ? Some examples www.testbase.co.uk -- Pandb - religion -- clearly wrong Brightcloud - Reference and Research Training and Tools -- correct www. michaelwoodside.co.uk pandb -unknown clearly wrong Brightcloud -- Personal sites and Blog -- correct Kennelreg.co.uk Pandb - unknown - clearly wrong Brightcloud -- Business and economy -- correct I can go on with examples. What do we do ? we can't be asking to enter url categorisation change requests ? If we were to do that we will be doing that all day at this rate. we need help URGENTLY please. Local reseller is not helping with this at all. Thanks Nalin.
... View more
05-24-2012
01:23 AM
Hi David, Here are my notes on the matter hopefully they will guide you to a solution. 1. some bits have to be in place now to get the user-id working. 2. User-id agent doesn't do groups. They are done within the user id agent option within the Device tab of PA gui. 3. There are a couple of tech documents on how to set this up. Don't look in help within user id agent. its' useless. 4. The CLI commands to use to debug issues are as follows. "show user ip-user-mapping ip 99.99.99.99" The other "debug user-id refresh group-mapping all" "debug software restart user-d" ---> this restarts a service with the PA box. This fixed us seeing duplicated groups in drop dwon boxes. Please note I am a mere mortal in when it comes to PA matters. So please use care when using these commands. Look up the command syntax, context and description and then run them so that you are aware of what you are doing. Hopefully this will help you. Regards Nalin.
... View more
05-17-2012
02:14 PM
Thanks to all those who responded. Khipu our support partners logged in and ran a couple of CLI commands. They also restarted the user-id process within the PA box. this seem to cure the problem. i could then see the rules being properly applied and users being correctly associated with their groups. Personally I don't think this part of the PA box is well implemented. I will try to update thispost with the CLI commands that were used to validate the user -> group --> ip address association. Thanks to all again. Nalin.
... View more
05-15-2012
02:19 PM
1 Kudo
We recently installed the new PAN agent 4.1.4.3. Since we installed this we don't seem to be able to get at our LDAP group against which we have many security rules. i have been told that an option exist with userid agent option in the Device tab to define the groups. Having done this the groups are still ignored during rule processing. To compound matters, the Help within Panagent software is quite poor to say the least. Are there any documents that spell out how-to set this up. Security groups used to work under the old PA AGENT. I would be grateful if someone can point in the right direction please. Thanks Nalin.
... View more
03-24-2012
03:14 AM
Hi, After going to version 4.3 and coincidentally changing our ISP seem to have brought on an avalanche of "not-resolved" errors. I note though that there is a mention of a 5 second response time requirement from Brightcloud before this verdict is delivered. Hmmm... I have made requests in the past to Brightcloud for URL re-categorisation and have received decent responses. However I agree that Brightcloud is not proactive ( not quick enough in this regard) in it's categorisation work. We had to send a whole list of IP addresses that microsoft (and yahoo) use to host their skydrive files so that students could download their work. I find that when MS / Yahoo add to this pool we had to keep sending these to Brightcloud. I have seen other more obvious ones not being categorised properly as well. We use custom URL categories to get over this. We have set up categories such as universal allow / deny , staff allow / deny and students allow / deny. These are then tied to policies that filter pages for these user types. Nalin.
... View more
.png "Satish"){kind=avatar}
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
