This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About ColonelHawx
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About ColonelHawx
06-22-2020
11Posts
0Likes
0Solutions
Jun 22, 2020Last Visited
User
Activity
User
Profile
Latest posts by ColonelHawx
| Subject | Views | Posted |
|---|---|---|
| 6104 | 06-18-2020 12:11 PM | |
| 6149 | 06-18-2020 07:38 AM | |
| 6168 | 06-18-2020 07:32 AM | |
| 6180 | 06-18-2020 07:22 AM | |
| 2367 | 06-18-2020 04:44 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 09-11-2019 05:53 AM |
| Date Last Visited | 06-22-2020 06:39 AM |
| Posts | 11 |
06-18-2020
12:11 PM
I am also seeing ALOT of aged out TCP (80) traffic . Well actually almost all of them...
... View more
06-18-2020
07:38 AM
Thanks, indeed - Boundary Groups were the first stuff I checked and they are all in order. regarding the zones, the Global Protect clients are on a different zone as the sccm primary server, but rules are in place to allow for this:
... View more
06-18-2020
07:22 AM
@BPry , thanks for the reply. We are just not receiving ANY deployments at all. SCCM is able to see the client, communicate with it etc. All clients are active when we view SCCM Console. It just wont deploy and we ruled out any SCCM issues when we recently deployed a VM on the same subnet which does not have/need the GP client. So now it all points to Global Protect.
... View more
06-18-2020
04:44 AM
Thanks for the help Pete... Yeah we are also using HIP profiles with clients being member of the Domain, having AV etc etc... Will try to figure out whats going on...
... View more
06-18-2020
03:26 AM
Thanks for this info... It def helps... So we have the EXACT same setting applied. But what really baffles me is that we just tested by deploying a VM within the same subnet as our GP Clients & Primary SCCM server and it worked and received ALL applications and software deployments. But the GP Clients are still not getting it. Can I ask what Version of SCCM you are on? 1910 or 2002? Also, is there anything specific you had done/applied on your Palo GP Config? Our clients are using a /22 range and below is a snapshot of a device using Global Protect.
... View more
06-17-2020
01:35 PM
Long story short, we purchased GP and configured rules etc to allow SCCM traffic to and from VPN clients who are users working from Home. We are struggling to release applications or updates to these users and would like to know if anyone has GP with SCCM configured and working? Someone mentioned on a Palo FB forum, that pre-logon should be set for SCCM to work seamlessly. Anyone able to share some info on this? Glo
... View more
06-01-2020
05:57 AM
Thanks for the reply. Before I create a new Thread for help... Did you configure your GlobalProtect with pre-logon connection method or user-logon? Someone mentioned on a Palo FB forum, that pre-logon should be set for SCCM to work seamlessly. Thanks... PS: Are you by any chance seeing any "aged-out" traffic from your GP Client (Source) to SCCM Server (Destination)?
... View more
05-29-2020
03:43 AM
Hi Nelson, apart from the Palo Rules, anything specific you had to do on SCCM? We released patches over a week ago to a test collection, and the devices which are still "on-prem" received the updates, however the devices (users working from home that are connected via Global Protect) are not receiving the updates. All rules and comms to our sccm server are configured and working. Boundary groups within SCCM are also good. Anything I a missing?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-22-2020
06:39 AM
|
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks