This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About giacomomarconi
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About giacomomarconi
07-25-2023
10Posts
1Like
0Solutions
Jul 25, 2023Last Visited
User
Activity
User
Profile
Latest posts by giacomomarconi
| Subject | Views | Posted |
|---|---|---|
| 1307 | 04-28-2021 06:04 AM | |
| 939 | 12-17-2020 03:20 PM | |
| 3208 | 12-17-2020 06:59 AM | |
| 3299 | 12-15-2020 08:39 AM | |
| 3341 | 12-15-2020 02:44 AM | |
| 3575 | 12-11-2020 01:39 PM | |
| 4046 | 12-10-2020 02:57 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 12-11-2020 01:39 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 07-07-2020 02:07 AM |
| Date Last Visited | 07-25-2023 10:11 AM |
| Posts | 10 |
| Total Likes Received | 1 |
04-28-2021
06:04 AM
I would like to use, for example, CloudFront subnets (I 've about 50 of them) in Security Policies.
I find this script https://github.com/chrisgoodwins/paloalto_add-addresses.
Is there the way to use a single big static list without use many address objects grouped in a single address group ?
Can I use Objects > Regions ?
thanks
... View more
12-17-2020
03:20 PM
yes it is configured. I meant, is server monitor only need for wmi probing ?
... View more
12-17-2020
06:59 AM
I tried to add a third User-id Agent. What's the need of User Identification > User Mapping > server monitoring tab ? If I press discover my DC's are listed, but with the access denied error. thanks very much for yours help.
... View more
- Tags:
- user
12-15-2020
08:39 AM
this will be easy to diagnose without a lab. Just clone your HTTP/HTTPS policy that has no user identification and call it user-test. add this directly above and allow with source user ID. I can see a lot fo empty "source user" in "Monitor/Url Filtering" also without that rule.
... View more
12-15-2020
02:44 AM
I increased the timeout to 600, but when I launch: show user ip-user-mapping all type UNKNOWN I always see about 10-15 PCs in the unknown list.
... View more
12-11-2020
01:39 PM
1 Kudo
Thank you both for the answers. at the moment i disabled the user identification in the policies, to keep people work. I noticed that pc/user with problem are always the same. And the interruption (i see the empty user in url filtering) is less of the 45min set in the timeout setting. next week I will set up a little lab where to try to reproduce the problem. should I look at the user id agent server to find something ? Giacomo
... View more
12-10-2020
02:57 AM
Hello I am using ldap users as source user in security policy. The policy defines who can access http-service and https-service to the internet. After the Firewall there are about 500 PCs and about 10% PCs stop to browse the internet every 20-30min, pressing F5 in the browser seems to solve. The only thing that I understood is that the problem is always in those PC. Removing the source user limitation this problem disappear. Any idea on howto debug this ? thanks very much
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks