Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About stef
About stef
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Thursday
14Posts
0Likes
1Solution
Apr 08, 2021Last Visited
User
Activity
User
Profile
Latest posts by stef
| Subject | Views | Posted |
|---|---|---|
| 126 | a month ago | |
| 205 | 03-09-2021 05:54 AM | |
| 317 | 03-08-2021 01:25 AM | |
| 301 | 03-07-2021 12:27 AM | |
| 192 | 02-15-2021 10:43 AM |
User Badges
Public Statistics
| Date Registered | 09-21-2020 01:46 AM |
| Date Last Visited | Thursday |
| Total Messages Posted | 14 |
a month ago
Indeed it was routing issue. I push the config from Panorama. Nat policy changed to ISP2, but the default route remain the same because the Virtual router config was overwritten and the changes from panorama didnt applied . Thank you all for your responses!
... View more
03-09-2021
05:54 AM
Hello I dont use PBF. They are both up. I have default routes with different Metrics
... View more
03-08-2021
01:25 AM
Hello all, we have let say 10 users behind one home internet router. They can ping the portal and so on but just one of them can connect. The error of the others is that there is a network problem trying to reach the portal. Are there any limitations? Was someone experienced the same issues ?
... View more
03-07-2021
12:27 AM
Hello all, we have configuration with dual ISP. From the 1st provider we get public IP directly on the PA 2nd provider is with nat, i mean on PA we have private IP. When the route goes through the 1st one everything works fine. When we switch to the 2nd one there is a problems . In the monitoring tab i can see all requests to Internet zone ends with "Incomplete, aged out". Meanwhile we have IPSec's configured and they worked just fine from the both providers. Can someone suggest what can be the problem? Thank you in advance!
... View more
02-15-2021
10:43 AM
Hello, i just update pan os from 9.1.6 to 10. And on one of the firewall i get error: .......... Validation Error: user-id-agent unexpected here vsys is invalid [edit] Could you please advice were can be the problem. Thank you!
... View more
02-12-2021
01:47 AM
Hello all, i was configure data filtering and it works. But i face problems with the mailing. When the the fw match pattern it blocks it, but the email stuck in outbox queue , and the user can not send/receive other emails until the mail is deleted from the queue. Can we achieve some kind of silent drop, so for the client to look like the email was send ?
... View more
12-22-2020
12:53 AM
Hello, updating panorama to 9.1.6 and Restart configd daemon fixed the issue . Thank you all
... View more
12-13-2020
09:49 PM
@BPry this is only the example. It is address not address set . But the problem is with all other addresses and address-groups to For example if i remove " offices-subnet" witch is configured as source subnet the error appear for the destination one witch is different and when i remove the destination one the error appear for the source object of the next policy, and so on and so on. If i create new address-group or address and populate it in the policy there is no problem.
... View more
12-13-2020
12:44 PM
They are all shared. If i create new shared one and push it it is work .
... View more
12-13-2020
11:01 AM
if it was just one address ok , but there is 1000+ records. They used to worked before.
... View more
12-13-2020
08:43 AM
Hello all, i have problems with the security policy push. When i try to push them the commits fails with : . Validation Error: . rulebase -> security -> rules -> ms-ad -> destination 'offices-subnet' is not an allowed keyword . rulebase -> security -> rules -> ms-ad -> destination offices-subnet is an invalid ipv4/v6 address . rulebase -> security -> rules -> ms-ad -> destination offices-subnet invalid range start IP . rulebase -> security -> rules -> ms-ad -> destination 'offices-subnet' is not a valid reference . rulebase -> security -> rules -> ms-ad -> destination is invalid . vsys1 . Error: Failed to find address 'offices-subnet' . Error: Unknown address 'offices-subnet' . Error: Failed to parse security policy . (Module: device) . Commit failed it happens with all shared addresses and address-groups. when i remove them, i mean when i push the polices without source/destination address configured, the commit is completed.
... View more
11-22-2020
10:13 PM
@BPry i think i fount the problem. I appear that the problem was only whit the GlobalProtect clients and was related to the domain mismatch. Thank you for the replay !
... View more
11-22-2020
03:30 PM
Hello all, i have problem user based policy . in cli i can see that ip and group mapping is fine . When i configure the policy the users and groups appears in the drop down and so on, but didn't match the traffic . Can you give me some suggestions? Thank you in advance!
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
Thursday
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
