Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About GlennSJ
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About GlennSJ
11-06-2020
12Posts
6Likes
2Solutions
Nov 06, 2020Last Visited
User
Activity
User
Profile
Latest posts by GlennSJ
| Subject | Views | Posted |
|---|---|---|
| 1512 | 08-18-2020 08:04 AM | |
| 1653 | 08-11-2020 02:35 PM | |
| 1636 | 08-11-2020 02:11 PM | |
| 1866 | 07-24-2020 12:40 PM | |
| 927 | 06-13-2020 07:29 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 08-18-2020 08:04 AM | |
| 1 Like | 08-11-2020 02:35 PM | |
| 1 Like | 08-11-2020 02:11 PM | |
| 1 Like | 07-24-2020 12:40 PM | |
| 1 Like | 05-21-2020 12:11 PM |
User Badges
Community Statistics
| Member Since | 03-04-2020 11:46 AM |
| Date Last Visited | 11-06-2020 10:12 AM |
| Posts | 12 |
| Total Likes Received | 6 |
08-18-2020
08:15 AM
I appreciate it! I'm signed up for the EDU-210 course through Vets In Tech so hoping to take the next level exam (PCNSA) after the course in Sept. Gotta get more skills on my resume! -shawn
... View more
08-12-2020
12:08 AM
hi @aaltamirano
The installation of the certificate is required to avoid certificate warnings in the browsers. For visitors I know this could be complicated. But when you do require to decrypt also this traffic there is no way without this step. You could configure captive portal where you would write some information for the visitors about how to do this.
Also with pfsense, cryptographically there is no way to implement TLS decryption "transparently" without this step (except when you have the power of CIA, NSA or some other intelligence agency - but also if they do this with an official CA certificate I would assume they will get caught pretty fast).
For basic URL filtering you do not have to install the certificate on the clients as the firewall sees the domainname in cleartext in the TLS handshake when a client connects to a https website.
... View more
08-11-2020
03:54 PM
Thanks alot Glenn, Your trick resolved my issue. Cheers,
... View more
- Tags:
- hanks
06-13-2020
09:08 AM
1 Kudo
In palo Alto you need to create first NAT Rule with same destination and source zone and for destination translated port for you need to specify the port which server need to listen on. for example user open url https://4.4.4.4 then if server is listening on port say 456 then under destination port translation you can put port 456 and also server private ip address. Then security policy with your external zone as source and destination zone where server lives. Destination IP will be the public IP.
... View more
05-28-2020
06:45 AM
Calling a couple weeks ago about this, support said 7.0.2 is recommended over 7.1.x at that time. YMMV
... View more
05-28-2020
06:18 AM
I'd open a ticket, to at least get that process started. We found with non-persistent VDI they are only licensed when a user is logged into the vm. Once they log out it releases the license until another user logs into that machine (this is with floating user assignment not dedicated). If you are using Palo Alto NGFW at the perimeter, something we found that wasn't in the documentation is that it needs "google-base" in addition to "cortex-xdr" in the outbound security policy. If you think it is a communication issue check your traffic logs on the firewall to see if you are seeing any "deny" actions from that machine. edit: FYI - cortex-xdr depends on ssl, web-browsing
... View more
05-20-2020
08:11 AM
Yes Cortex XDR is supported. Use the VDI_ENABLED=1 switch when installing in the base image. There is also an imageprep process to go through when creating the image, and when adding files to the image later. All this is documented in the Admin guide. I don't know about the licensing question.
... View more
05-20-2020
08:08 AM
If "turns out backend is mostly Windows" = remote desktop services on a terminal server, then the terminal server agent is the way to go. If "turns out the backend is mostly Windows" = users gaining access to full clone or linked clone or instant clone virtual machines, then your existing user-id infrastructure which monitors AD logins will work without installing the terminal server agent.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-06-2020
10:12 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
