This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Thyrion
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Thyrion
02-24-2021
13Posts
0Likes
1Solution
Feb 24, 2021Last Visited
User
Activity
User
Profile
Latest posts by Thyrion
| Subject | Views | Posted |
|---|---|---|
| 1082 | 01-14-2021 12:48 AM | |
| 1514 | 12-16-2020 05:47 AM | |
| 2970 | 12-16-2020 05:45 AM | |
| 3211 | 12-15-2020 12:33 PM | |
| 3252 | 12-15-2020 11:07 AM | |
| 14540 | 07-28-2020 05:41 AM | |
| 2238 | 07-28-2020 05:37 AM | |
| 2239 | 07-16-2020 02:32 PM | |
| 2118 | 07-16-2020 07:30 AM | |
| 1538 | 07-16-2020 07:10 AM |
User Badges
Community Statistics
| Member Since | 05-21-2020 04:09 PM |
| Date Last Visited | 02-24-2021 11:37 AM |
| Posts | 13 |
01-14-2021
12:48 AM
you'll probably have better luck asking via email than posting on a public forum @fkrippendo 😉 community@paloaltonetworks.com -- some random internet guy
... View more
12-16-2020
05:47 AM
you can install the new terminal server agent package over the existing one for mass deployment you'd probably need to look at your software distribution solution
... View more
12-16-2020
05:45 AM
what mechanism are you using to match incoming IP addresses to user-id ? (are incoming user connections logging in via an account on the local AD. is Captive Portal set up? ) and what are you seeing in regards to apps not being identified correctly?
... View more
12-15-2020
12:33 PM
The 'fail-over' action will bring down the tunnel when the remote peer is unavailable Do you have a backup tunnel to take over? If not, it is better to hold-wait, else the tunnel has no way of recovering from a fault Hold-wait will also allow you to troubleshoot your tunnel monitor as it will not kill the tunnel
... View more
12-15-2020
11:07 AM
if both phases are still showing green ,the tunnel is actually up how did you set the monitoring profile? have you tested pinging the remote IP for reachability before enabling tunnel monitoring? double check if your security policy allows pinging the remote IP, double check if there is a need for additional routes or proxy-IDs for the remote IP, check if the IP is accepting ping (it may require a profile to be activated, or an ACL/security policy to be updated before you are able to ping it
... View more
07-28-2020
05:41 AM
you'll first need to get the log collectors to sync up and connected to your panorama before you start looking at your firewall connect to the individual log collectors and look for error messages there. once they connect to panorama and each other successfully, the firewall will start sending logs
... View more
07-28-2020
05:37 AM
my guess would actually be that firewall1 is the problem, as it has terminated the session, any followup ACK packets will be discarded by it
... View more
07-16-2020
02:32 PM
I'd push for more information and better troubleshooting, maybe even escalation Fragmentation shouldn't be a big issue
... View more
07-16-2020
07:30 AM
the url cache should get synced every 8 hours https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/high-availability/reference-ha-synchronization/synchronization-of-system-runtime-information you could try clearing your cache on both devices over the weekend in case something got 'stuck' and is preventing the sync
... View more
07-16-2020
07:10 AM
are you able to not use proxy-IDs (does the remote support route-based vpn or do they only do policy based vpn?) if you are able to not use proxy-ID, NAT inside the tunnel should work if you delimit the source/destination zones and networks in the NAT policy
... View more
07-16-2020
04:55 AM
hi @JimMcGrady this means the AD connection is not pulling in any username information (globalprotect is a different mechanism entirely), so first place to check is if you enabled audit logging on the AD and user logins are being logged, then check if the user account you set up for user-id has appropriate access to read those logs (event-log-reader) hope this helps
... View more
07-16-2020
04:27 AM
segmentation should only become an issue when there is such a large volume that the firewall is unable to properly reassemble the packets in a timely manner you cold try to adjust the TCP MSS on the interface which could help prevent fragmentation, see if that solves the issue
... View more
05-23-2020
03:19 AM
I'm getting this error, how do i get around it?
$ sudo apt install -o Dpkg::Options::="--force-overwrite" -y minemeld Reading package lists... Done Building dependency tree Reading state information... Done Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation:
The following packages have unmet dependencies: minemeld : Depends: libleveldb1v5 but it is not installable E: Unable to correct problems, you have held broken packages.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-24-2021
11:37 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks