About giacomomarconi

giacomomarconi · ‎04-28-2021

I would like to use, for example, CloudFront subnets (I 've about 50 of them) in Security Policies. I find this script https://github.com/chrisgoodwins/paloalto_add-addresses. Is there the way to use a single big static list without use many address objects grouped in a single address group ? Can I use Objects > Regions ? thanks

giacomomarconi · ‎12-17-2020

yes it is configured. I meant, is server monitor only need for wmi probing ?

giacomomarconi · ‎12-17-2020

I tried to add a third User-id Agent. What's the need of User Identification > User Mapping > server monitoring tab ? If I press discover my DC's are listed, but with the access denied error. thanks very much for yours help.

giacomomarconi · ‎12-15-2020

this will be easy to diagnose without a lab. Just clone your HTTP/HTTPS policy that has no user identification and call it user-test. add this directly above and allow with source user ID. I can see a lot fo empty "source user" in "Monitor/Url Filtering" also without that rule.

giacomomarconi · ‎12-15-2020

I increased the timeout to 600, but when I launch: show user ip-user-mapping all type UNKNOWN I always see about 10-15 PCs in the unknown list.

giacomomarconi · ‎12-11-2020

Thank you both for the answers. at the moment i disabled the user identification in the policies, to keep people work. I noticed that pc/user with problem are always the same. And the interruption (i see the empty user in url filtering) is less of the 45min set in the timeout setting. next week I will set up a little lab where to try to reproduce the problem. should I look at the user id agent server to find something ? Giacomo

giacomomarconi · ‎12-10-2020

Hello I am using ldap users as source user in security policy. The policy defines who can access http-service and https-service to the internet. After the Firewall there are about 500 PCs and about 10% PCs stop to browse the internet every 20-30min, pressing F5 in the browser seems to solve. The only thing that I understood is that the problem is always in those PC. Removing the source user limitation this problem disappear. Any idea on howto debug this ? thanks very much

Member Since	‎07-07-2020 02:07 AM
Date Last Visited	‎02-17-2022 03:13 AM
Posts	7
Total Likes Received	1

Online Status	Offline
Date Last Visited	‎02-17-2022 03:13 AM

About giacomomarconi

Use Cloud Service (like Cloud Front subnets) in security policies

Re: security policy source user strange behavior

Re: security policy source user strange behavior

Re: security policy source user strange behavior

Re: security policy source user strange behavior

Re: security policy source user strange behavior

Re: security policy source user strange behavior

Re: security policy source user strange behavior

Use Cloud Service (like Cloud Front subnets) in security policies

Re: security policy source user strange behavior

Re: security policy source user strange behavior

Re: security policy source user strange behavior

Re: security policy source user strange behavior

Re: security policy source user strange behavior

security policy source user strange behavior

Network Security

Cloud Security

Security Operations

About giacomomarconi