Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About iscott
About iscott
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Friday
24Posts
0Likes
1Solution
Sep 18, 2020Last Visited
User
Activity
User
Profile
Latest posts by iscott
| Subject | Views | Posted |
|---|---|---|
| 85 | a month ago | |
| 393 | 08-04-2020 10:58 AM | |
| 438 | 08-04-2020 08:21 AM | |
| 373 | 07-15-2020 07:56 AM | |
| 437 | 07-14-2020 02:04 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 11-14-2019 06:49 AM |
| Date Last Visited | Friday |
| Total Messages Posted | 24 |
a month ago
Hello, Currently, we are installing the Cortex XDR agent on Debian servers. We have followed the steps as the documentation says. But, when the services are gonna be started it shows an error: "sbin/service: not found". All the services show "Stopped" status. If I check the "/opt/traps" directory and if I run the command "dpkg -l | grep cortex-agent, all is ok. The agent is installed. The issue is when we try to execute it. Is there something that we need to change? Regards,
... View more
08-04-2020
10:58 AM
Yesterday, I have logged with a "SuperUser" account. It was the "admin" user (default). But, when I browse to Device > Administrators, the user's accounts didn't appear. Just the "admin" account. Also, I was not able to create a new user. I need to change the LDAP's user privileges. Currently, LDAP users can log in to the web interface, but they do not have "SuperUser" permissions. Where can I change it? Where can I see the LDAP firewall's administrators? Regards,
... View more
08-04-2020
08:21 AM
Hello, Community. Do you know if is there a way to change the "level admin" of an AD's user? In Device > Administrators I can't see the firewall's admins. Just the "admin" account. If I try to create a new account, I can't do it. The LDAP users can manage the firewall but they are not "Super Users". Currently, we have 2 firewalls in HA, connected to Panorama. Thanks in advance. Regards,
... View more
07-14-2020
02:04 PM
@AlexSieber So, If I have one client in Management or in Panorama mode, can I configure Templates and Device Groups? Thanks a lot. Regards,
... View more
07-13-2020
09:19 PM
Hello, I have read about Panorama's modes. But I would like to know if Templates and Group Device's configurations are available without matter what mode is the VM/Physical device. As I understand the documentation, the Panorama's mode only determines how logs data is stored. Thanks in advance. Regards,
... View more
06-26-2020
01:57 PM
@BPry So, Doesn't matter if I have a pool to one IP? The another factor is that the IP address is not related to a Palo Alto's interface and "configuration". It learns the IP through static route. Regards,
... View more
- Tags:
- b
06-26-2020
10:03 AM
Hello, I have a question related to the DIPP translation. I understand de DIPP Interface. Many IP addresses can use the same IP. But I need to translate internal IP addresses to one specific IP different from the Outside Interface. If I use the DIPP Translated Address, it works similarly to Interface Translation? So for example, Can I translate 15 internal IP addresses to one specific IP in this mode? The specific IP is not related to the Interface. Regards,
... View more
06-15-2020
12:40 PM
Hello, I am configuring a PPPoE interface. I have enabled it and typed the username and password, and it continues without connecting. Is there another step that I have to take to enable the interface. I have followed the documentation, and also I have verified that there is no MAC Address restriction. When I connect the ISP link to another device, it began to work. Thanks in advance. Regards,
... View more
06-07-2020
08:51 PM
Hello, I have configured the User-ID to authenticate Global Protect's users and for User Mapping. But, the Firewall shows the LDAP as "host unreachable". I don't have an MGT IP address, but I have changed the LDAP's service route to look for LDAP's request in the internal interface. Also, I have checked the User and Password in the Server Profile and everything is ok. Is there a step that I am missing or is it something related to the MGT interface? Regards,
... View more
05-25-2020
09:32 PM
Hello, I would like to know what is the best option to migrate an EIGRP configuration to a Palo Alto dynamic routing protocol. My first idea was to use OSPF. But I have checked the ASA configuration and they have: - Prefix-list. - Route-maps. - Route commands. After that I think that the best is to use BGP, but I am not sure. Thanks in advance. Regards,
... View more
05-15-2020
04:36 PM
Hello, Can someone said me the release date for PAN-OS 9.1.1? Regards,
... View more
05-11-2020
03:04 PM
No. I am not using an SNMP community. When you say that I can ask for interface statistics, what are you referring to? To associate an Interface Mgmt Profile? Regards,
... View more
05-11-2020
10:57 AM
Hello, Is there a way to see the bandwidth that VPNs clients are using when they are connected through a VPN? I have not seen any specific report for GlobalProtect statistics, for example in ACC. Just logs in the tab Monitor, but they are not showing the activity of the users. Regards,
... View more
05-05-2020
11:40 AM
Ok, thank you @azuniga . I understand.
I am migrating the configuration. I am using this playlist: https://www.youtube.com/watch?v=-gbQ-YcgoPs&list=PLD6FJ8WNiIqVez8EBeoyRsnQcKTA5FuZ-&index=1.
But in video 2, during the device creation, it asks for the NGFW's Serial Number. Is this step permanent or can I change the Serial Number, when I pass the config to the real device? It is because I do not have the physical devices, but I need to starts with the config migration.
Regards,
... View more
05-05-2020
09:33 AM
So, I need the command "more system:running-config". Or can I use the "show run"?
Regards,
... View more
04-26-2020
08:19 PM
Hello, I need to migrate the configuration from a CISCO ASA. I would like to know what file do I need. I have the output of the " show run" command and the output of the "tech-file". Thanks,
... View more
04-19-2020
04:30 PM
Hello, I have a question related to the actions that I can configure in Security Profile. Specifically, Vulnerability Protection. What happens if I set the action as "Alert"? Will it drop the connection? Or the connection will be permitted, and it just logs the traffic of the malicious action executed? Regards,
... View more
04-19-2020
04:10 PM
Hello, Last week I have worked in the same case, of multiple domains. If you don't use the User-ID Agent and configure multiple domains, perhaps you will have inconsistent domain issues. Some users will be authenticated with the NetBIOS (netbios\user) and some others with the FQDN (fqdn\user). If you don't want to install the agent on the AD server, you can install it on another computer. It is gonna work. If you decide to install the agent on the AD Server, the Agent will have access to all Security logs of the AD, but the Agent is gonna filter the logs based on what it needs to UserID. My recommendation is to install it. I hope it helps! Regards,
... View more
03-09-2020
02:19 PM
Hello, I have to do a TCPDUMP to test the communication of my Active Directory because a have a problem with the User-ID service. I have read the documentation and I don't understand when says that the TCPDUMP captures the traffic that traverses the MGT interface. So what happens with the traffic that traverses the data plane and not the management plane? For example, the authentication communication starts on a computer and goes to the AD server. I think that this is traffic that traverses the data interfaces. The link that I've used is: https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/monitoring/take-packet-captures/take-a-packet-capture-on-the-management-interface Can someone help me to understand? Regards,
... View more
02-25-2020
06:39 AM
Hello, I have the same issue, with an HA. Currently Active can update its content updates, but Passive can't update them. I have a question, about your workaround. When you said "configure the ARP entries", do your refer to add the MAC address, of each MGT interface, in all Layer 3 interfaces that I have configured? Regards,
... View more
02-14-2020
06:50 AM
Hello, About this case. I don't know why in Group Mapping configuration was a "sAMAccountName" configured in the Group Objects. Were necessary to create a new Group Mapping with the "Search Filter" blank. It began to work after that change. Regards,
... View more
02-06-2020
02:26 PM
Hi, Matt. Thanks for your response. Yes, I have deleted it last week. Now, my "user domain" space is blank. I have followed the documentation. I have both the groups and users un NETBIOS format (netbios\group, netbios\user). But it continues without matching. Thought was the policy, but when I change the specific group to "Known User" the policy starts to log traffic. So based on that I conclude that the FW is not seeing the users within the group. Regards,
... View more
02-06-2020
09:40 AM
Hello, I have a problem with authentication. I have configured a PAN integrated agent. I can see users authenticated. At the same time, the firewall is getting the groups from AD. But for some reason, the users are not matching with the groups. So the policy based on the group that I configure is not logging traffic. Users and groups are in NETBIOS format. Regards,
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
Friday
|
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
