About GideonKonga

Hi Team,   We have an query where we need to find the ip address of one of the Gateway compute location.   Is there any method to find the gateway ip address before enable the partiular compute location. ... View more

Hi Team,   I have an query is there any limitation  for adding particular hip objects in an single hip profile e.g we can add only 100 hip objects in an one Hip profile. ... View more

Hi Team,   please confirm whether in pan-os 10.0 and later do we require SSL-Decryption for captive portal.   Is SSL-Decryption is mandatory for Captive portal. ... View more

Hi Team,   We are using prisma access managed by panorama so this vulnerability will be impacted ??? I have one ore query where my firewalls are running on 9.1 and if i upgrade the panorama to 10.1 so if there will be any issue or it will be supported ... View more

Hi Team,   We have already used one interface for RP can we use one more interface to configure RP ?? please find below snapshor for reference     ... View more

Hi Team, We are using PA-3020 and the disk space is usually used upto 95% and we have enabled agressive cleaning as well as we do manual cleaning once a week where the disk-space utilisation is below 95% and in a week it gets utilised upto 95%.we need to upgrade the firewall to 9.1 platform whether we will face the same issue. ... View more

Hi Team,   We need to migrate only two vsys from 6 vsys from Pa-5050  to PA-3250 Kindly let me know the steps to migrate it.   Kindly let me know any articles to migrate vsys. ... View more

Dear Team, We are using Azure Ad server to integrate with PA.We have configure Azure Saml for authentication of Gp .We need to configure user-based and group based policy foor Gp users through Azure Ad. We need to integrated user-id agentless or uid agent and group mapping. IS it poosible to integrate with Azure AD. Note - We dont have on premise AD server. ... View more

Hi team, Can we renew the server certificate used for gp before expiry can you please let me know if there would be any impact after renewing the certificate before expiry??   Or we need to renew the certificate before 1 day ???     ... View more

Hi Team,   We need our PA devices to  block bulk mails from our trust zone.We have an email relay in our organisation. Can we achieve it through custom vulnerability signature by creating an signature and applying threshold value ... View more

Hi Team,   We are using tacas server for authentication administrator account on panorama we have applied the tacas server authentication profile directly on Device > setup > management > authentication settings.when we are able to login from particular user we getting prompt of changing password.we had disabled the password complexity and tried to authenticate but we are getting prompt of changing password.we did test authentication through tacas server the authentication was successful. We checked in system logs for type auth and we can view that for particular user we are able to get auth-success logs we are able to login with different user through tacas we are able to login. We tried to login firewall with the same username we are able to login.     ... View more

Hi Team,   We have 2FA auth method using Radius Server for GP VPN users login. After LDAP password authentication users receives SMS Token and when user entering the token the GP VPN again prompts for the token. So eventually user receiving another SMS Token and when entering second token user getting authentication failed message on GP client.   For some users we have observed that the we need to enter the credentials two times when we checked in third party software also we were getting multiple logs. Same has been observed in the Auth logs, PFA for reference. ... View more

Hi Team ,   We have 2 Vm firewalls both the vm firewall are in Ha and in active and passive. The passive firewall base license and all the license have expired one week ago. The ha1 and ha2 link was showing and both the VM firewall was in active-active state. Both the firewalls were in active state. Can you please let me know why both the vm firewalls went into active. ... View more

Hi Team,   We need to integrate Saml With Global Protect .We have done the saml configuration in azure perfectly fine.We have exported the metadata file from azure and inported in PA NGFW successfully.We need to achieve through IDP certifcate but the issue is we are unable to add the IDP certificate in authentication profile in certificate for signing request. The IDP certificate is also imported when we import the metadata file.     ... View more