This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About zaidshaikh
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About zaidshaikh
08-11-2020
21Posts
0Likes
2Solutions
Aug 11, 2020Last Visited
User
Activity
User
Profile
Latest posts by zaidshaikh
| Subject | Views | Posted |
|---|---|---|
| 3592 | 07-28-2020 02:56 AM | |
| 3636 | 07-28-2020 01:56 AM | |
| 2037 | 07-06-2020 01:52 AM | |
| 2185 | 06-22-2020 08:45 AM | |
| 2244 | 06-22-2020 02:23 AM | |
| 1628 | 04-16-2020 03:13 AM | |
| 1648 | 04-16-2020 02:23 AM | |
| 3256 | 04-16-2020 01:30 AM | |
| 3288 | 04-16-2020 12:50 AM | |
| 3311 | 04-15-2020 11:46 PM |
User Badges
Community Statistics
| Member Since | 12-10-2019 09:47 PM |
| Date Last Visited | 08-11-2020 12:26 AM |
| Posts | 21 |
07-28-2020
02:56 AM
Thanks Checkoz, We were using WIN server as a NTP server which was mapped to out DController and this WIN server was also configured a client of DC, due to which it experiences issues when the DC is going throu some problems. By the way, meantime was lookin at our FGT FW, it can act as well as propagate NTP. Anyways, thanks checko
... View more
- Tags:
- anks
07-28-2020
01:56 AM
hi guys, i am lookin to config PA 5220 as a NTP server for my lan network, this whole network is completely off of internet. is it possible to config if yes what are the steps. I tried keeping the Primary and secondary NTP fields blank, but if want to broadcast the PA local time on my LAn network, am unable to find further config settings. Does anyone knows how to config PA as NTP server withoout Internet connectivity??
... View more
07-06-2020
01:52 AM
Hi guys, I wanna know the Comment column under Network---Interface tab synchronizes when PA is set up as Active- Passive HA? I assumed it wont, and made some changes in comments coloumn and later found out it got synced. I referred the PA document: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/high-availability/reference-ha-synchronization/what-settings-dont-sync-in-activepassive-ha and it does not mention Comment column.
... View more
06-22-2020
08:45 AM
Static routes are configured for traffic destined to DC-FW (or dmz traffic) and the new network which i made is for management of my external facing devices. About snat config even i wasnt sure of as my source is 501 ip and destination is the interface ip on PA. Anyways i tried to ping from 501 to 503 but am not getting ping responses i.e Fails if i try ping on switch as: ping x.x.53.1 source x.x.51.1-------- ping Success On PA ping source x.x.53.1 host x.x.51.1 ------- ping success But on LAN PC no PING Responses.
... View more
06-22-2020
02:23 AM
Guys, facing a small issue hope can resolve together I have created a new network on PA as Layer-3(503) and am trying to communicate with my other existing layer-3 network (501): Steps configured are as follows : 1) created Layer-3 ae4.503 with IP X.53.1 and existing is ae4.501 with IP X.50.1 2) Policy from both either network 3) Policy based forwarding specific from 501 to 503; Pbf is configured to avoid route lookup 4) also Source NAT is created from 501 to 503 5) Access switch is configured with vlan and interface IP for both. when is try ping from access switch to PA ---- SUCCESS Now i try ping from my PC which is in 501 vlan am unable---- NO SUCCESS i see hit-counts increase on PA policy, pbf and sNAT; but ping from my PC is FAILING... Help
... View more
04-16-2020
02:23 AM
@ Mayur, The issue is resolved, the Ip with port is now accessible as we wanted to achieve. What we found is that on the PAN policy the application tab was set as "application-default", as soon as we made it "Any", it worked with different ports as well. So the Issue is RESOLVED 🙂 Thanks for your help you made me stick to the topic 😛
... View more
04-16-2020
01:30 AM
Yes you are right. Becoz we understand is that the dns proxy is doing its job by resolving the URls to IPs configured in the DNS-Proxy. About Port issue i believe it out of this topic..
... View more
04-16-2020
12:50 AM
becoz there are servers internally which is running on different services. otherwise all is working fine. but i cannot move forward if other teams are not able to access these servers for their activity.
... View more
04-15-2020
11:46 PM
Yes i added both dns proxy rules and static entries. But inside the static entry page also the address need to mention for a fqdn also is only taking ( 172.X.X.X) NOT (172.X.X.X:8888) i wanna achieve the latter part of this.
... View more
04-15-2020
10:20 PM
@BK0007 Yes. just now i tried the putting my PC with this new interface IP, am able to resolve dns names also my PC is effecting changes via domain and dns. Thanks BK and Mayur for making me understand. Now the problem is the same with DNS proxy(ie PAN) also, am not able to resolve any internal URLs (like 172.16.60.X:8888) to resolve i want to know how to add/or put ports insode the DNS proxy rules inside PAN. Thanks Guy:)
... View more
04-15-2020
04:07 AM
yes , what i am thinking is if a configure the DNS proxy on PAN, the PC gateway will be that of PAN interface, and through this interface the DNS request will flow accordingly. However, what about the reverse traffice, i mean if the domain controller(DC) pushes some changes to these PCs, then how DC will communicate, since this DC is directly communicating with the PCs currently. I dont want to ask the system team,for any changes/additional configs request. Thats y tried web-proxy. regret confusing you much
... View more
04-14-2020
10:00 PM
@Mayur Actually i got engaged to other activities, was off-the hook with this case.. I didn;t made the ADSL policy yet, instead we tried making web proxy server by adding IPs into exception lists on the the browser settings, to make it easy. In this case also, I am able to put IPs the the exception list , but not the Ports (eg: 172.16.11.12:8888), is there any way to add ports in the list? we found this proxry server way is more easy and relatable to us.
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks