Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About Sec101
About Sec101
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Wednesday
41Posts
1Like
0Solutions
Apr 07, 2021Last Visited
User
Activity
User
Profile
Latest posts by Sec101
| Subject | Views | Posted |
|---|---|---|
| 100 | Tuesday | |
| 109 | 2 weeks ago | |
| 165 | 3 weeks ago | |
| 254 | 3 weeks ago | |
| 138 | 3 weeks ago |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 2 weeks ago |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 | |||
| 1 | |||
| 5 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 09-29-2020 09:35 AM |
| Date Last Visited | Wednesday |
| Total Messages Posted | 41 |
| Total Likes Received | 1 |
2 weeks ago
1 Kudo
@NikolayDimitrov Good to know. Thanks for the replies! With your info above I was able to find the tags and registrations by enabling User-ID redistribution on panorama and it automatically pushes the IP to tag registration to the firewalls. No need for serial or device group designation in the api call.
... View more
3 weeks ago
So in order to use this effectively, on older versions, you have to include a serial number of the firewall? That kind of defeats the purpose as the IP never actually get's registered to panorama then does it, it just goes directly to the firewall with the serial you specified? So with 9.1 you still have to specify a serial?
... View more
3 weeks ago
When registering IP's to Tags on panorama, do you have to specify a target or device-group or serial number in your call? How does that match/registration actually occur? Do you have to specify a "location device-group" in the call? <uid-message><version>2.0</version><type>update</type><payload><register><entry ip="10.1.1.3"><tag><member>Test</member></tag></entry></register></payload></uid-message> Should there be a location/device group somewhere in this statement if you are using panorama? Can you actually register dynamic address directly to panorama to distribute to the firewalls, or do you have to designate a serial and go through panorama to a firewall and not ON panorama? Are you stuck using User-ID redistribution in order to make this work with multiple firewalls?
... View more
4 weeks ago
I could be missing something, but wish there was an option to not enforce when on local trusted network if internal host detection occurred.
... View more
4 weeks ago
Thank you for the quick reply Mick. Yes and yes. If memory serves correct, when not logged in and enforce global protect, computers don't connect to local network I think?
... View more
4 weeks ago
This would be for updates in the case a user is not signed in/signed out. Machine would lose connection if no prelogon is setup until user authenticates I think? Mostly regarding updates when a user is not signed into a machine. But if internal it appears it still enforces sign on for network connectivity even when inside a trusted network.
... View more
4 weeks ago
Is it possible to FQDN exclude your local domain *.localdomain when enforcing network Global Protect connection? Could this be used as a workaround for not having pre-logon configured? How/why is there not a enforce global protect connection only while "outside" of the network?
... View more
03-11-2021
12:47 PM
@reaper So basically, there is no "implicit" use of an official app on a custom app-id, even if a parent application is defined?
... View more
02-26-2021
07:09 AM
Thanks for the note! More asking how many are using the solution in an actual production environment, vs setting up.
... View more
02-24-2021
01:36 PM
How many of you are actively using this plugin in production networks? If you wouldn't mind sharing how large is your org?
... View more
02-11-2021
12:42 PM
Let me add, that you will have to force users to reconnect after this change.
... View more
02-03-2021
12:15 PM
This post is gold.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
Wednesday
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
