This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About kkrause
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About kkrause
12-30-2021
13Posts
3Likes
1Solution
Dec 30, 2021Last Visited
User
Activity
User
Profile
Latest posts by kkrause
| Subject | Views | Posted |
|---|---|---|
| 1780 | 03-03-2021 06:40 AM | |
| 18914 | 05-14-2018 05:57 AM | |
| 18933 | 05-12-2018 04:20 PM | |
| 5152 | 03-03-2015 11:27 AM | |
| 4816 | 03-03-2015 07:41 AM | |
| 5042 | 03-03-2015 06:23 AM | |
| 5043 | 03-02-2015 12:52 PM | |
| 5209 | 03-02-2015 12:32 PM | |
| 9723 | 02-27-2015 01:35 PM | |
| 10558 | 02-27-2015 06:08 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 Likes | 03-03-2015 11:27 AM | |
| 1 Like | 02-26-2015 12:43 PM |
User Badges
Community Statistics
| Member Since | 01-21-2015 01:51 PM |
| Date Last Visited | 12-30-2021 04:44 PM |
| Posts | 13 |
| Total Likes Received | 3 |
03-03-2021
06:40 AM
I'm running a PA-500, PANOS 8.1.15-h3 and am trying to create a site-to-site IPSec VPN tunnel. It must run alongside an already configured GlobalProtect gateway where the GlobalProtect is also configured to use IPSec. Can these two VPN types exist on the same firewall at the same time? They would both be using the same outside interface to connect to the internet. Can they use the same IP? Thanks
... View more
05-14-2018
05:57 AM
Thanks for the response. I found the client and got it installed for testing. Thanks again!
... View more
05-12-2018
04:20 PM
I AM the responsible party for my organization. I've downloaded the latest client to my firewall, but don't want to activate it until I can test it. Is there any method for me to download it from my PAN 500 for testing?
... View more
03-03-2015
11:27 AM
2 Kudos
As a follow up- Palo Alto support responded stating that local users/groups can be used in policies but need to be manually entered into the User/Select field. I've tested this and it appears to do the trick. I can now control access to a local database VPN user via policy. Thanks for the quick responses.
... View more
03-03-2015
07:41 AM
Thanks for your response, however the problem still exists. I'll open a ticket with Palo Alto and see what I can find out.
... View more
03-03-2015
06:23 AM
I've created the local account test and it is enabled. And here is the search results for a security policy. The only user names that appear are from LDAP. Searching on any of the other local users shows no results either.
... View more
03-02-2015
12:52 PM
Thanks for the response. I have committed the configuration and when I type in the dropdown list for users, only my LDAP users are shown with the <domain>\<username> format. None of my local users appear. I'm sure there's something simple I'm overlooking as I'm new to PAN devices, but I sure can't determine what it may be. Thanks, Ken
... View more
03-02-2015
12:32 PM
I have internal employees using VPN and also outside vendors with VPN accounts. In creating the policies (ex. allow employees to all internal servers while only allowing vendor VPN access to specific hosts) it appears that I can only choose LDAP users/groups as the source user. The drop-down only shows AD groups/users. I want to be able to select from the local users database as well. How can I go about this? Any given policy would be for either LDAP or local user authentication. I do have separate authentication profiles for both employee VPN (using LDAP) and vendor VPN (using local user database). Thanks, Ken
... View more
- Tags:
- source-user
- vpn
Labels:
- Labels:
-
Configuration
-
Networking
-
Set Up
02-27-2015
01:35 PM
I found my password problem. I had changed the Portal to use Auth Sequence but not the gateway. Once I put that in place I can now VPN with my AD users and with my local database users. Oh, the joy of learning a new platform! Thanks to all for the help.
... View more
02-27-2015
06:08 AM
Thanks for the response and additional documentation. It seems that the Authentication Sequence will take care of my needs.
... View more
02-27-2015
06:07 AM
Thanks for the response. I implemented the Authentication Sequence and I can see in my logs that the VPN authentication attempt is occurring on both the local profile and the LDAP profile. However I have a username/password issue for this particular user account that I need to resolve. I'm absolutely 100% sure that the username and password I'm testing with is correct and the account is enabled....so I'll check again
... View more
02-26-2015
12:43 PM
1 Kudo
I have a need for our employees to use LDAP in the authentication profile for VPN connectivity, but I also have outside third parties that need remote VPN connectivity as well. I want them to use local database user accounts. How can I do this? It seems that a given portal can only use 1 authentication profile type. I only have 1 external interface with 1 IP address assigned. Is the solution to use loopback interface? Thanks, Ken
... View more
Labels:
- Labels:
-
Configuration
-
Networking
-
Set Up
-
Troubleshooting
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
12-30-2021
04:44 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks