Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About iscott
About iscott
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Wednesday
14Posts
0Likes
1Solution
May 27, 2020Last Visited
User
Activity
User
Profile
Latest posts by iscott
| Subject | Views | Posted |
|---|---|---|
| 115 | Monday | |
| 143 | 2 weeks ago | |
| 271 | 3 weeks ago | |
| 350 | 3 weeks ago | |
| 416 | 3 weeks ago |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 |
User Badges
Public Statistics
| Date Registered | 11-14-2019 06:49 AM |
| Date Last Visited | Wednesday |
| Total Messages Posted | 14 |
Monday
Hello, I would like to know what is the best option to migrate an EIGRP configuration to a Palo Alto dynamic routing protocol. My first idea was to use OSPF. But I have checked the ASA configuration and they have: - Prefix-list. - Route-maps. - Route commands. After that I think that the best is to use BGP, but I am not sure. Thanks in advance. Regards,
... View more
3 weeks ago
No. I am not using an SNMP community. When you say that I can ask for interface statistics, what are you referring to? To associate an Interface Mgmt Profile? Regards,
... View more
3 weeks ago
Hello, Is there a way to see the bandwidth that VPNs clients are using when they are connected through a VPN? I have not seen any specific report for GlobalProtect statistics, for example in ACC. Just logs in the tab Monitor, but they are not showing the activity of the users. Regards,
... View more
3 weeks ago
Ok, thank you @azuniga . I understand.
I am migrating the configuration. I am using this playlist: https://www.youtube.com/watch?v=-gbQ-YcgoPs&list=PLD6FJ8WNiIqVez8EBeoyRsnQcKTA5FuZ-&index=1.
But in video 2, during the device creation, it asks for the NGFW's Serial Number. Is this step permanent or can I change the Serial Number, when I pass the config to the real device? It is because I do not have the physical devices, but I need to starts with the config migration.
Regards,
... View more
3 weeks ago
So, I need the command "more system:running-config". Or can I use the "show run"?
Regards,
... View more
04-26-2020
08:19 PM
Hello, I need to migrate the configuration from a CISCO ASA. I would like to know what file do I need. I have the output of the " show run" command and the output of the "tech-file". Thanks,
... View more
04-19-2020
04:30 PM
Hello, I have a question related to the actions that I can configure in Security Profile. Specifically, Vulnerability Protection. What happens if I set the action as "Alert"? Will it drop the connection? Or the connection will be permitted, and it just logs the traffic of the malicious action executed? Regards,
... View more
04-19-2020
04:10 PM
Hello, Last week I have worked in the same case, of multiple domains. If you don't use the User-ID Agent and configure multiple domains, perhaps you will have inconsistent domain issues. Some users will be authenticated with the NetBIOS (netbios\user) and some others with the FQDN (fqdn\user). If you don't want to install the agent on the AD server, you can install it on another computer. It is gonna work. If you decide to install the agent on the AD Server, the Agent will have access to all Security logs of the AD, but the Agent is gonna filter the logs based on what it needs to UserID. My recommendation is to install it. I hope it helps! Regards,
... View more
03-09-2020
02:19 PM
Hello, I have to do a TCPDUMP to test the communication of my Active Directory because a have a problem with the User-ID service. I have read the documentation and I don't understand when says that the TCPDUMP captures the traffic that traverses the MGT interface. So what happens with the traffic that traverses the data plane and not the management plane? For example, the authentication communication starts on a computer and goes to the AD server. I think that this is traffic that traverses the data interfaces. The link that I've used is: https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/monitoring/take-packet-captures/take-a-packet-capture-on-the-management-interface Can someone help me to understand? Regards,
... View more
02-25-2020
06:39 AM
Hello, I have the same issue, with an HA. Currently Active can update its content updates, but Passive can't update them. I have a question, about your workaround. When you said "configure the ARP entries", do your refer to add the MAC address, of each MGT interface, in all Layer 3 interfaces that I have configured? Regards,
... View more
02-14-2020
06:50 AM
Hello, About this case. I don't know why in Group Mapping configuration was a "sAMAccountName" configured in the Group Objects. Were necessary to create a new Group Mapping with the "Search Filter" blank. It began to work after that change. Regards,
... View more
02-06-2020
02:26 PM
Hi, Matt. Thanks for your response. Yes, I have deleted it last week. Now, my "user domain" space is blank. I have followed the documentation. I have both the groups and users un NETBIOS format (netbios\group, netbios\user). But it continues without matching. Thought was the policy, but when I change the specific group to "Known User" the policy starts to log traffic. So based on that I conclude that the FW is not seeing the users within the group. Regards,
... View more
02-06-2020
09:40 AM
Hello, I have a problem with authentication. I have configured a PAN integrated agent. I can see users authenticated. At the same time, the firewall is getting the groups from AD. But for some reason, the users are not matching with the groups. So the policy based on the group that I configure is not logging traffic. Users and groups are in NETBIOS format. Regards,
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
