Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About ColonelHawx
About ColonelHawx
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
06-22-2020
11Posts
0Likes
0Solutions
Jun 22, 2020Last Visited
User
Activity
User
Profile
Latest posts by ColonelHawx
| Subject | Views | Posted |
|---|---|---|
| 3273 | 06-18-2020 12:11 PM | |
| 3318 | 06-18-2020 07:38 AM | |
| 3337 | 06-18-2020 07:32 AM | |
| 3349 | 06-18-2020 07:22 AM | |
| 1458 | 06-18-2020 04:44 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 | |||
| 1 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 09-11-2019 05:53 AM |
| Date Last Visited | 06-22-2020 06:39 AM |
| Total Messages Posted | 11 |
06-18-2020
12:11 PM
I am also seeing ALOT of aged out TCP (80) traffic . Well actually almost all of them...
... View more
06-18-2020
07:38 AM
Thanks, indeed - Boundary Groups were the first stuff I checked and they are all in order. regarding the zones, the Global Protect clients are on a different zone as the sccm primary server, but rules are in place to allow for this:
... View more
06-18-2020
07:22 AM
@BPry , thanks for the reply. We are just not receiving ANY deployments at all. SCCM is able to see the client, communicate with it etc. All clients are active when we view SCCM Console. It just wont deploy and we ruled out any SCCM issues when we recently deployed a VM on the same subnet which does not have/need the GP client. So now it all points to Global Protect.
... View more
06-18-2020
04:44 AM
Thanks for the help Pete... Yeah we are also using HIP profiles with clients being member of the Domain, having AV etc etc... Will try to figure out whats going on...
... View more
06-18-2020
03:26 AM
Thanks for this info... It def helps... So we have the EXACT same setting applied. But what really baffles me is that we just tested by deploying a VM within the same subnet as our GP Clients & Primary SCCM server and it worked and received ALL applications and software deployments. But the GP Clients are still not getting it. Can I ask what Version of SCCM you are on? 1910 or 2002? Also, is there anything specific you had done/applied on your Palo GP Config? Our clients are using a /22 range and below is a snapshot of a device using Global Protect.
... View more
06-17-2020
01:35 PM
Long story short, we purchased GP and configured rules etc to allow SCCM traffic to and from VPN clients who are users working from Home. We are struggling to release applications or updates to these users and would like to know if anyone has GP with SCCM configured and working? Someone mentioned on a Palo FB forum, that pre-logon should be set for SCCM to work seamlessly. Anyone able to share some info on this? Glo
... View more
06-01-2020
05:57 AM
Thanks for the reply. Before I create a new Thread for help... Did you configure your GlobalProtect with pre-logon connection method or user-logon? Someone mentioned on a Palo FB forum, that pre-logon should be set for SCCM to work seamlessly. Thanks... PS: Are you by any chance seeing any "aged-out" traffic from your GP Client (Source) to SCCM Server (Destination)?
... View more
05-29-2020
03:43 AM
Hi Nelson, apart from the Palo Rules, anything specific you had to do on SCCM? We released patches over a week ago to a test collection, and the devices which are still "on-prem" received the updates, however the devices (users working from home that are connected via Global Protect) are not receiving the updates. All rules and comms to our sccm server are configured and working. Boundary groups within SCCM are also good. Anything I a missing?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-22-2020
06:39 AM
|
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
