About StevenEerdekens

StevenEerdekens · ‎04-17-2020

You have to add the routes of course from one VR to the other, using inter VR routes. I have it working: even when ISP1 is up, I can connect to both gateways (ISP1 in VR1, ISP2 in VR2) and I can always reach my LAN 192.168.1.0/24 LAN resides in VR1 In VR1 I route the pool of Globalprotect gateway-ISP2 to VR2 In VR2 I route 192.168.1.0/24 to VR1

StevenEerdekens · ‎01-03-2020

Glad to hear!

StevenEerdekens · ‎12-27-2019

@XaiVang, here you are

StevenEerdekens · ‎07-31-2019

Anybody seen this already? Although 9.0.0 is already downloaded/installed the error is the one you get if you're running a 8.1 release and downloads 9.0.3 without first downloading the 9.0.0 base image. Same behaviour with 9.0.1 and 9.0.2. Device is a PA-220 .

StevenEerdekens · ‎03-05-2019

I've got it running now. The root certificate was already installed, but I had to import a different intermediate bundle: https://ssl-ccp.secureserver.net/repository/sf_bundle-g2-g1.crt Thanks Steven

StevenEerdekens · ‎03-03-2019

Hi Remo, The Duckdns.org cert is signed by Starfield Secure CA GW, so I tried to import the Root G2 and intermediate G2 certificate found on http://certs.starfieldtech.com/repository/ But I still see the following error in the system log when filtering ddns type entries: Server response: 'Peer certificate cannot be authenticated with given CA certificates' Any clue? Thanks!

StevenEerdekens · ‎03-03-2019

Hi, I'm trying to setup DynDNS based on the instructions found at https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/networking/configure-dynamic-dns-for-firewall-interfaces.html I'm using DuckDNS, but I'm stuck at the 'certificate profile' portion. As I understand it correctly I have to import the (public) SSL certificate of DuckDNS, but this is not provided by them. I don't understand why this is needed since their certificate is signed by Starfield CA, which is already in the list of 'Default Trusted Certificate Authorities' on the Paloalto firewall. Also other DynDNS provides such as DYN don't seem to provide their public certificates for download.

StevenEerdekens · ‎11-17-2017

Hi, Has anyone succeeded yet in populating a Dynamic Address Group with IP addresses using XPATH? (API can use 2 methods: an XML file or all info included in one command via XPATH). Idea is to integrate with Infoblox, which only understands XPATH. Thanks

StevenEerdekens · ‎07-20-2016

I can confirm the solution of noore.ghunaym works. In my case I have 1 dynamic IP on the untrust interface. I placed the static NAT rule above the general hide NAT rule. Also, I had to enter the current official IP hardcoded in the Source-translation field (translated packet tab), since you can only enter a fixed IP or an address object referring to a fixed IP here. (It's not possible to select an object referring to a FQDN here).

Date Registered	‎01-21-2015 08:32 AM
Date Last Visited	‎08-24-2020 10:03 AM
Total Messages Posted	92
Total Likes Received	8

Online Status	Offline
Date Last Visited	‎08-24-2020 10:03 AM

About StevenEerdekens

Re: Multiple Global Protect gateways on same firewall

Re: DynDNS client on PANOS 9.0

Re: DynDNS client on PANOS 9.0

9.0.3 fails to download because 9.0.0 is 'not loaded' (but that's not the case)

Re: DynDNS client on PANOS 9.0

Re: DynDNS client on PANOS 9.0

Re: DynDNS client on PANOS 9.0

Re: DynDNS client on PANOS 9.0

Re: Nat type 2 , type 3 with playstation and xbox

Re: DynDNS client on PANOS 9.0

Re: Expedition Settings: Machine Learning Parquet Path

Re: Multiple Global Protect gateways on same firewall

Re: DynDNS client on PANOS 9.0

Re: DynDNS client on PANOS 9.0

9.0.3 fails to download because 9.0.0 is 'not loaded' (but that's not the case)

Re: DynDNS client on PANOS 9.0

Re: DynDNS client on PANOS 9.0

DynDNS client on PANOS 9.0

Populate Dynamic Address group via XPATH

Re: Nat type 2 , type 3 with playstation and xbox

Strata

Prisma

Cortex

About StevenEerdekens