This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About mcocat
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About mcocat
08-18-2015
18Posts
1Like
1Solution
Aug 18, 2015Last Visited
User
Activity
User
Profile
Latest posts by mcocat
| Subject | Views | Posted |
|---|---|---|
| 1424 | 03-02-2015 01:49 PM | |
| 1466 | 03-02-2015 05:49 AM | |
| 3480 | 02-27-2015 01:34 PM | |
| 3560 | 02-27-2015 11:37 AM | |
| 4382 | 02-25-2015 08:12 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 11-18-2013 07:25 AM |
User Badges
Community Statistics
| Member Since | 03-11-2013 12:55 PM |
| Date Last Visited | 08-18-2015 09:07 AM |
| Posts | 18 |
| Total Likes Received | 1 |
03-02-2015
01:49 PM
Not exactly. I'd prefer not to VPN at all. For example, I'd like to create a rule that allowed ANY source from the outside to my internal server on port 80, but only for certain users. I know I can create a rule and specify users, but an iphone that doesn't VPN in won't provide user-id matches to the PAN. After doing some research I believe this is an impossible task, but if anyone has some ideas I'd be interested in hearing them.
... View more
03-02-2015
05:49 AM
Our techs often interface with Zenoss, and we have a mobile app that will let us view and interact with the alarms. The problem is we need to establish VPN access first. I also don't want to open the port for the world, and I can't allow a specific ip/range because they will be connecting from various mobile carriers. I'd like to specify an allowed user as part of the rule, but how can I ensure that mobile device will be allowed via user? Can I create a rule for certificate based authentication? Any other ideas?
... View more
Labels:
- Labels:
-
Configuration
-
Management
-
User-ID
02-27-2015
01:34 PM
I don't want to grant more access than is currently available though. I want to see the true picture of what is open from the outside. I just want to bypass the scan threat that is being blocked. the threat id is 8001, not the port I am trying to access.
... View more
02-27-2015
11:37 AM
I am looking to allow a single host on the outside to run an NMAP port scan. What can I do to allow this host to get an accurate picture from the outside without giving additional access that may skew the results? In addition I would need it to bypass vulnerability protection (TCP Scan 8001). Looking at my scan attempts I see the application type come back as Traceroute, non-applicable, lpd, dns, icmp and ssh. I am open to ideas, thank you!
... View more
Labels:
- Labels:
-
Configuration
-
Networking
-
Troubleshooting
02-25-2015
08:12 AM
I feel like an idiot, but how do I sort the columns in my monitor tab? The used to be sorted by generate time, but that doesn't seem to be the case anymore.
... View more
Labels:
- Labels:
-
Management
-
Panorama
-
Troubleshooting
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks