Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
- COVID-19 Response Center
About Danross
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About Danross
05-17-2022
18Posts
1Like
0Solutions
May 17, 2022Last Visited
User
Activity
User
Profile
Latest posts by Danross
| Subject | Views | Posted |
|---|---|---|
| 132 | 04-18-2022 08:12 AM | |
| 272 | 04-15-2022 05:32 AM | |
| 274 | 04-15-2022 05:32 AM | |
| 172 | 04-15-2022 05:18 AM | |
| 113 | 04-14-2022 04:13 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 11-23-2021 07:52 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 3 Likes | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 02-12-2020 05:39 PM |
| Date Last Visited | 05-17-2022 09:28 AM |
| Posts | 18 |
| Total Likes Received | 1 |
04-15-2022
05:32 AM
Oh along with this. Currently the config sync link is missing from the HA widget on the dashboard. Kinda strange.
... View more
04-15-2022
05:32 AM
Good morning, I'm trying to understand the behavior with this command request high-availability sync-to-remote running-config . I have a HA active/passive pair that I had some config sync issues after an OS upgrade. If I want to push the active running configuration from my active device to my passive device, do I run this command from the active device or the passive device? I would assume I would be running it from the active device. Please advise, Thanks Dan
... View more
04-15-2022
05:18 AM
Digging this up from the grave. Having a similar issue. I'm questioning the command you selected. I believe this would push the passive devices config to the active device. Would it not? request high-availability sync-to-remote running-config, to me indicates syncing to the active device. Wouldnt I run this on the Active device to push it to the passive device?
... View more
04-11-2022
11:29 AM
Good afternoon, I'm trying to understand the behavior of the global protect client as it pertains to session expirations. I'm getting a message "remove previous user" message. I'm trying to determine what that means as I'm used to seeing the "user session expired" message in the logs. What triggers the "remove previous user" flag? Is this user manually logging off? I don't believe so as my testing shows the message for a user log off is "client logout". This stems from a customer claiming they are getting forced to login multiple times a day, I dont belive them as the logs indicated otherwise but I want to be sure what this message means. Thanks Dan GlobalProtect
... View more
03-10-2022
07:45 AM
My monitor is showing traffic from this IP. It was from previous connections to the gateway. It is a new portal/gateway. Yes, it has a security policy, all settings are correct as far as I'm seeing.
... View more
03-09-2022
12:11 PM
I've got a new Global Protect portal/gateway. When I get connected to the gateway, I can see the connection via the GP monitor. Then if I go the to traffic monitor and search the source range 192.168.203.0/24 I only get traffic from previous testing that I've performed. I'm not getting the currently connected device to show up for some reason. It's connected as the remote user option in the network>gateway shows me connected and the ip of 192.168.203.2. However its not in the monitor. What do you all think? GlobalProtect
... View more
02-18-2022
05:57 AM
Good guess. At this moment, if a user issavvy enough to look at the settings menu on a device using Global Protect that I've setup for them, they can simply download Global Protect and connect another device to our network without me knowing. I've got a "small" group of devices that I dont have ownership of. I'm in the process of implementing these hip checks as well as others so I can limit the devices connecting to a specific server. I'd be putting in place a security rule to enforce. Is there a feature to block those settings being visible to end users? What other methods should I be utilizing via the PA to limit connections like I described?
... View more
02-17-2022
04:16 AM
I've split up all my UDID's into seperate objects and added to a single hip profile. It seems to be working now. However it's a bit messy in the hip objects area. There has to be a better way to manage this.
... View more
02-14-2022
07:17 AM
I'm looking for some feedback on the UDID HIP check for iOS devices. Currently there is no way to pull serial numbers from the Apple iOS platform unless you connect a compatible MDM solution to the PA. There is however a way to pull the UDID or ( unique device ID) that apple has tagged on each device it builds. I've added that under HIP object > General > host info > Host ID. I've added those to a hip object in the following manner. There is a character limit of 255 for the HOST ID section for this particular check. My question is as follows: I've attempted to add in several UDID's seperated by commas. It appears that there is only one identifier that can be entered per object. It was bad enough when I thought my limit was 255 characters and I could only fit in like 5 devices in the field given the UDID 32 character length. Am I doing this wrong or are they expecting us to have an object for every device I have connected? GlobalProtect
... View more
11-24-2021
10:09 AM
You like to live on the edge. I do not. Let us know if you see anything funky with this version.
... View more
11-23-2021
07:52 AM
1 Kudo
Gustavo, I just attempted this myself with no change in behavior. Still gettting the error on generating system logs message.
... View more
05-06-2021
05:54 AM
I've just updated to 5.2.5-c84 and I'm getting the message as others have reported. I did find a solution that was presented on another forum. In a nut shell it appears that there needs to be a u-turn nat to the public IP for GP portal address to udp 4501. Detailed here: GlobalProtect: how to disable alert that connection is unrealiable : paloaltonetworks (reddit.com)
... View more
05-06-2021
05:29 AM
Sweet! Thank you @WabidWabit I'll check that link out. So in your mind, since 5.0, global protect is slow in general but the message you are seeing on laptops doesn't actually appear to be affecting performance? That has been my experience as well. No difference in actual performance.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-17-2022
09:28 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks
