About BBDOmexico

BBDOmexico · ‎01-28-2011

Thanks for your answer, Emr.

BBDOmexico · ‎01-27-2011

Hi Guys, Since I have upgrade to 3.1.6 (December 2010), the PA-500 is unable to run Costum Reports longer than 1 week or last 7 days, I downgraded to 3.1.5 but this does not work. Right now I have version 3.1.6, an every time I try to run a Custom Report longer than "Last 7 days" It shows me "Communication %20 fail". Is this a bug on the PANOS or is just my device. Is there any patch or fix for this issue. Thanks in advance.

BBDOmexico · ‎11-17-2010

At this moment I have already opened 4 cases regarding the same issue. I do not know If you have solved this or there are not a solution. What do I need to do? Whom I have to report this issue?

BBDOmexico · ‎09-08-2010

FYI

BBDOmexico · ‎09-02-2010

Thanks, but those do not work with my NMS.

BBDOmexico · ‎08-30-2010

Hi, Thanks for the link, but I can not compile the txt file. And when I uploaded to OpManager, it did not recognize the file as a valid MIB file. Is there a valid MIB file that I can use to work with? Or are there any MIB compilers that undertand that file? Thanks in advance. Regards. JMB

BBDOmexico · ‎08-26-2010

Hi Guys, I am working with OPManager and I need to get the MIB from the PAN-500. Is there any place where I can find them? Thanks in advance. Regards JMB

BBDOmexico · ‎08-10-2010

I have opened two cases, and it looks that you don not care about it. I have the case 18948 and 18951. I have just received a call, from case 18951, and the guy restart the PAN Agent services, he chenged some configuration options, but I have the same problem. By the way, my local distributor has no idea what is happening with the device, they just told me that I have to contact you. I wonder you could have time for trobleshoot this, or at leats give me some ideas in order to fix this issue. Thanks in advance.

BBDOmexico · ‎08-09-2010

Hi, I have tried with the cli commonad that you advised me. But I still have the same problem. Any other advise that you have. Thanks.

BBDOmexico · ‎08-06-2010

Hi NRICE, 1.I am using PAN-Agent version 3.1.2 2.The cli command show user.... gives me the next info: admin@PA-500-BBDO> show user pan-agent statistics Name IP Address Port Vsys State Users Grps IPs Activity Cnts Link Speed ---------------------------------------------------------------------------------------------------------------------- BBDOAgent 192.168.0.2 3033 vsys1 connected, ok 293 15 130 433 fast 2. I am using the Domain Users group. 3. The cli command debug device server dump.... gives me all the users that belong to the group. Is there anything else that I need to check or some configuration that I need to add or delete? Thanks in advance.

BBDOmexico · ‎08-06-2010

Hi Al, 1. For IP 192.168.1.195 is working right now. But for instance, 192.168.2.101, in pan-agent I see the user as unknown, attached is the screenshot. 2. From cli-command, I have this info. admin@PA-500-BBDO> show user ip-user-mapping ip 192.168.2.101 IP address: 192.168.2.101 User: unknown Ident. By: UNKNOWN Idle Timeout: 817s Max. TTL: 1717s Groups that user belong to (used in policy) 3. I have stoped and restarted the pan-agent, but it stills show me many users as unkown. 4. admin@PA-500-BBDO> debug device-server reset pan-agent all Pan-agent reset all connections. After I reset the connections, I see this info. admin@PA-500-BBDO> show user ip-user-mapping ip 192.168.2.101 IP address: 192.168.2.101 User: unknown Ident. By: UNKNOWN Idle Timeout: 597s Max. TTL: 1497s Groups that user belong to (used in policy) I see this info with another user, admin@PA-500-BBDO> show user ip-user-mapping ip 192.168.1.3 IP address: 192.168.1.3 User: bbdomexico\ana-re Ident. By: AD Idle Timeout: 186s Max. TTL: 186s Groups that user belong to (used in policy) But in pan-agent app, I see the users as unkown. Attached you will find the screenshot. Is there anything else that I shoul do. Thanks in advance.

BBDOmexico · ‎08-05-2010

Hi guys, Pan-agent is not working as it should be. When I run the statistics command, I get the following info: admin@PA-500-BBDO> show user pan-agent statistics Name IP Address Port Vsys State Users Grps IPs Activity Cnts Link Speed ---------------------------------------------------------------------------------------------------------------------- ADAgent 192.168.0.2 3033 vsys1 connected, ok 292 15 162 46595 fast But, when I run the ip-user mapping command, I got the following info admin@PA-500-BBDO> show user ip-user-mapping all IP Ident. By User Idle Timeout (s) Max. Timeout (s) --------------- --------- -------------------------------- ---------------- ---------------- 192.168.2.36 AD bbdomexico\carmen-c 2083 2083 192.168.1.195 UNKNOWN unknown 296 1196 10.0.2.235 UNKNOWN unknown 128 428 192.168.1.3 AD bbdomexico\ana-re 2083 2083 192.168.2.16 AD bbdomexico\olmos_j 2083 2083 192.168.2.13 AD bbdomexico\javier-b 2083 2083 192.168.0.7 AD bbdomexico\backup1 2084 2084 192.168.2.101 UNKNOWN unknown 682 1582 192.168.2.99 AD bbdomexico\proximity01 2083 2083 192.168.1.189 UNKNOWN unknown 234 1134 192.168.2.27 AD bbdomexico\teresa-e 2083 2083 192.168.2.234 AD bbdomexico\baruch-o 2448 2448 192.168.10.11 AD bbdomexico\saul-s 2083 2083 192.168.1.158 AD bbdomexico\chantal-o 2083 2083 192.168.2.47 AD bbdomexico\beatriz-p 2083 2083 192.168.1.5 AD bbdomexico\andres-c 2083 2083 192.168.2.233 UNKNOWN unknown 463 1363 192.168.2.18 AD bbdomexico\manuel-c 2083 2083 . . . . 192.168.1.127 UNKNOWN unknown 628 1528 192.168.10.67 AD bbdomexico\omdresearch 2863 2863 Total: 193 users I run the pan-agent user-IDs, and I got the next info admin@PA-500-BBDO> show user pan-agent user-IDs User Name Vsys Groups ------------------------------------------------------------------ bbdomexico\antonio-mo vsys1 bbdomexico\domain users bbdomexico\mailusers bbdomexico\omd bbdomexico\users bbdomexico\tania-m vsys1 bbdomexico\domain users bbdomexico\users bbdomexico\jesus-g vsys1 bbdomexico\domain users bbdomexico\mailusers bbdomexico\omd bbdomexico\users bbdomexico\christian-s vsys1 bbdomexico\domain users bbdomexico\users bbdomexico\laura_r vsys1 bbdomexico\domain users bbdomexico\users bbdomexico\jorge-m vsys1 bbdomexico\domain users bbdomexico\users bbdomexico\antonio-a vsys1 bbdomexico\domain users bbdomexico\users bbdomexico\fabiola-s vsys1 bbdomexico\domain users bbdomexico\users bbdomexico\trainee03 vsys1 bbdomexico\domain users bbdomexico\users bbdomexico\patricia-m vsys1 bbdomexico\domain users bbdomexico\mailusers bbdomexico\omd bbdomexico\users bbdomexico\sandra vsys1 bbdomexico\domain users bbdomexico\users bbdomexico\edgar-ri vsys1 bbdomexico\domain users bbdomexico\users bbdomexico\ana-h vsys1 bbdomexico\domain users bbdomexico\users bbdomexico\iusr_bbdodc3 vsys1 bbdomexico\domain users bbdomexico\users bbdomexico\javier-e vsys1 bbdomexico\domain users bbdomexico\trafico_ bbdomexico\users bbdomexico\luis-g vsys1 bbdomexico\domain users bbdomexico\users bbdomexico\trainee04 vsys1 bbdomexico\domain users bbdomexico\trafico_ bbdomexico\users This is happening due to a bug, or there is something else that I have to configure. Because, this is the fourth time in 8 months that this happens. And PANTAC Support has no answer for it. I have PAN OS 3.1.3 Hope you could help me. Thanks in advance.

BBDOmexico · ‎06-25-2010

Hi Guys, I have an issue with the SSL VPN authentication via RADIUS. I have configured the RADIUS Server with this options: Name:PANSSL Address: 10.0.0.8 Vendor Name: RADIUS Standard The Policy and Connection Type, is as follows: Name: AccessVPN Conditions: Windows User Groups, domain\domain_users Access Permission: Access Granted Authentication Method: Checked: Microsoft Encrypted Authetication version 2 (MS-CHAP-v2) User can changed password after it has expired Microsoft Encrypted Authentication (MS-CHAP) User can changed password after it has expired Unencrypted Authentication (PAP, SPAP) RADIUS Attributes: Framed-Protocol: PPP Service-type: Framed I have a Windows Server 2003. When I try to get access, It gives me the next error: User "domai\domai_user" failed authentication. Reason: User is not in allowlist. I have modified the allow list, many times, rigth now I have all users in the allowlist, but it is not working. I am working with a PAN-500, software version: 3.1.2, SSL-VPN Client 1.1.1, Application-Version 192-655, Threat version 192-655, Antivirus 240-279, URL Filtering 3376. Any help? Thanks in advance.

BBDOmexico · ‎06-16-2010

Hello Stephen, The traffic is being routed to the PAN-500. In fact, PAN-500 is the default gateway for all the VALNs and the Network 192.168.0.0/22. I am able to see the traffic from Trust to Untrust, and from Trust to Trust. Users in VLANs can access Internet. Thanks in advance. JM Barrera

BBDOmexico · ‎06-16-2010

I have created a Trust to Trust rule, allowing all traffic. I have just moved to the top, but I am unable to communicate from VLAN users to Network 192.168.0.0/22, and viceversa. Is anything else, that I should do. Thanks in advance.

Date Registered	‎12-01-2009 08:50 AM
Date Last Visited	‎08-15-2019 02:38 PM
Total Messages Posted	17

Online Status	Offline
Date Last Visited	‎08-15-2019 02:38 PM

About BBDOmexico

Re: Errors with Cosutm Reports

Errors with Cosutm Reports

Re: Issue with PAN-AGENT

Re: Issue with PAN-AGENT

Re: PAN MIBs

Re: Errors with Cosutm Reports

Errors with Cosutm Reports

Re: Issue with PAN-AGENT

Re: Issue with PAN-AGENT

Re: PAN MIBs

Re: PAN MIBs

PAN MIBs

Re: Issue with PAN-AGENT

Re: Issue with PAN-AGENT

Re: SSL VPN Authentication

Re: Issue with PAN-AGENT

Issue with PAN-AGENT

SSL VPN Authentication

Re: VLAN and Routing

Re: VLAN and Routing

Network Security

Cloud Security

Security Operations

About BBDOmexico