About sjamaluddin

When upgrading to a new major release, you'd have to download the new baseline first. So in this case you'd need PAN OS v6.0.0 in the device (even if you don't install it) and then download and install PAN OS v6.0.1 or v6.0.x You ought to be able to see PAN OS v6.0.0 through the same check now, since you can see PAN OS v6.0.1 however, if there is a problem. perhaps you can try the upload file PAN OS v 6.0.0 manually? ... View more

One would user UserID agent - if you have a distributed DC set up - across multiple WAN locations. That way you can run the UseriD Agent on each DC at the remote location and keep their chatter local. Then only send the filtered (specific IP to user mappings) across the WAN to a head end firewall. If however, you'd like to keep everything under one administrator groups's control (sometimes server folks and network folks have trouble sharing info.), then it may be easier to simply run the UserID agentless on the firewall. That way, only the access to AD via the LDAP admin account will be needed to have the firewall talk to the DCs. This would be preferred i n cases where the DCs and firewall are all local and there is no WAN link to cross. ... View more

Hello You said that the user was not part of any group. As such, have you added that user to the Authentication profile for GP Portal / GW as an individual user there? You can do the reset command - as that forces the LDAP server to pull all the users/ groups from the AD again (before its hourly update). If you add a new user to a group or to AD, the firewall groups ought to be reset so as to pull any new users / groups on the AD ... View more