About slawek.kunach

Hi, For some reason my Palo Alto 2020 has stopped recognizing rules that are applied to AD user groups. My 2 User ID agents are running on the Domain controllers and are showing green on my Palo Alto box. It works if I apply the rule to a specific AD user, so I know it is able to communicate with the ID agent otherwise it wouldn't register the user as logged on. It also lets me add the AD user group to a rule so it must be discovering the groups somehow. But when it comes to the web browsing rule, in this example, it doesn't apply the rule that is set for a user group. The only thing different was that I moved a server into a different ip range last night and changed the necessary security and NAT rules. Although the network range that is being affected I didn't touch at all and didn't make any changes to point to or away from that range either, or the range it points to. Any ideas? Is there anything I can look at on the ID agent to see why it would not be applying rules to AD groups? ... View more

Hi, I have a bit of a strange one hence the strange question. I have a user who wants to upload files to a company's sharepoint website. Now as my rules stand currently they are not allowed to upload or use certain web applications. I tried making a custom rule just for testing purposes on a machine with the same ip range as the user in question and with the same rules being applied. The custom rule allowed them to use Application WebDav (as this is the one that seems to be blocked when uploading multiple files, which is what the user needs to do) and to allow the traffic through. What is strange though is that when I look at the logs, even though it then allows my test computer to upload, it doesn't show on the logs as using that custom rule. I know it is the rule that must be allowing it because as soon as I disable or remove that custom rule it stops working. Hence my question. Can 1 bit of traffic use 2 or more security rules and therefore only show the first rule used in the logs> Otherwise I am not sure why this rule allows it to upload, but is not showing as being used. If anyone else has had issues allowing uploads to sharepoint i would appreciate hearing your thoughts. ... View more

We currently have User ID agent 3.1.2 installed on my 2 domain controllers and I am trying to upgrade them to V 4.1.4-3. Every time I try to install it I get it failing to install. I get the errors below in the logs. 07/23/12 10:57:55:960[ Info 1775]: UA: service is already stopped. 07/23/12 10:57:56:038[Error 1374]: Start service fails with error 1069!!!! 07/23/12 10:57:56:038[Error 1780]: UA: Start service fails with error 3! I have tried leaving the old version on and installing, removing the old version first then installing, I have also checked this suggestion https://live.paloaltonetworks.com/docs/DOC-3233 But still having the same problem. It allows me to re-install PA User-ID agent 3.1.2 but not any of the V4 installs. Any ideas? ... View more

I wonder if anyone might be able to tell me how long the ARP table timeout on a PA 2020 might be. ... View more