About Oleksandr

Hi There, I've opened the case and the problem was resolved. Kind regards, Alex ... View more

Hi, Session        33666223332         c2s flow:                 source:      192.168.31.90 [Trust]                 dst:         23.58.191.86                 proto:       6                 sport:       3023            dport:      443                 state:       INIT            type:       FLOW                 src user:    unknown                 dst user:    unknown                 qos node:    ethernet1/3, qos member N/A Qid 0         s2c flow:                 source:      23.58.191.86 [Untrust]                 dst:         x.x.x.x                 proto:       6                 sport:       443             dport:      4632                 state:       INIT            type:       FLOW                 src user:    unknown                 dst user:    unknown                 qos node:    ethernet1/4, qos member N/A Qid 0         DP                                   : 1         index(local):                        : 111790         start time                           : Wed Jul 22 08:29:39 2015         timeout                              : 15 sec         total byte count(c2s)                : 748         total byte count(s2c)                : 5230         layer7 packet count(c2s)             : 8         layer7 packet count(s2c)             : 8         vsys                                 : vsys1         application                          : ssl          rule                                 : my_test         session to be logged at end          : False         session in session ager              : False         session updated by HA peer           : False         address/port translation             : source         nat-rule                             : source-nat-outside(vsys1)         layer7 processing                    : enabled         URL filtering enabled                : False         session via syn-cookies              : False         session terminated on host           : False         session traverses tunnel             : False         captive portal session               : False         ingress interface                    : ethernet1/4         egress interface                     : ethernet1/3         session QoS rule                     : N/A (class 4)         tracker stage firewall               : TCP RST - client         end-reason                           : tcp-rst-from-client ... View more

Hi SLawek, my_test {   option {     disable-server-response-inspection no;   }   from Trust;   to Untrust;   source [ my_IP_address];   destination any;   source-user any;   category any;   application any;   service any;   hip-profiles any;   action allow;   log-start yes;   log-end no;   negate-source no;   negate-destination no;   description "Temporary_test rule";   disabled no;   tag Internet; } [edit] ---NO SSL decryption--- I"ve tested on IE, Chrome and FF PAN-OS 6.1.1 Kind regards, Alex ... View more

For "Field Identifier" I use the following strings: Username Prefix ->  cldcClientUsername.0= Username Delimiter -> , Address Prefix -> cldcClientIPAddress.0= Address Delimiter -> , ... View more

Thank you roe answer Yes, the configuration was not changed after upgrade, but THAT signature started blocking valuable server, so I decided to change the rule. Probably,  "exception" feature has changed the logic in new version? ... View more

Hi! Any updates for this? Thanks, Alex ... View more

ok, How about this one? LastPass - LastPass Heartbleed checker 🙂 ... View more

Hi! You can try this one Test your server for Heartbleed (CVE-2014-0160) ... View more

O! I missed main info I mean PAN-OS 6.0 ver. ... View more

I installed PANOS 6...have some issue with ftp (known bug) ... View more