This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About JeffH-SecBBQ
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About JeffH-SecBBQ
09-05-2023
4Posts
1Like
0Solutions
Sep 05, 2023Last Visited
User
Activity
User
Profile
Latest posts by JeffH-SecBBQ
| Subject | Views | Posted |
|---|---|---|
| 358 | 08-28-2023 02:33 PM | |
| 389 | 08-28-2023 12:31 PM | |
| 1827 | 03-13-2023 07:50 AM | |
| 2150 | 02-07-2023 10:48 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 08-28-2023 02:33 PM |
User Badges
Community Statistics
| Member Since | 10-19-2020 03:04 PM |
| Date Last Visited | 09-05-2023 02:14 PM |
| Posts | 4 |
| Total Likes Received | 1 |
08-28-2023
02:33 PM
1 Kudo
@TomYoung, that's a phenomenal explanation! Thank you so much! I will continue setting up FreeRADIUS to proxy authentication against FreeIPA via LDAP, then set up NGFW to authenticate against FreeRADIUS.
Much appreciated!!!
... View more
08-28-2023
12:31 PM
Hello,
I'm trying to set up NGFW in a lab environment where all users have an account defined in a centralized authentication store. We're using FreeIPA, which provides authentication services via LDAP and Kerberos.
I've gotten authentication working with LDAP, but it requires specifying a unique Administrator account and then pointing it to the Authentication Profile associated with the LDAP Authentication Server.
IMHO, this completely defeats the purpose of having a centralized directory.
Is there a way to set up NGFW to authenticate users based on group membership so I don't have to create unique admin user objects?
It looks like this is possible via RADIUS but not via LDAP. It looks like it's possible to set up a FreeRADIUS server in conjunction with FreeIPA. If setting up LDAP Group Membership checking isn't possible with NGFW, I may go that route.
Thanks in advance!
... View more
03-13-2023
07:50 AM
Memory leaks typically happen over a period of time. This issue occurs as soon as PAN-OS starts.
The original post, as well as mine, have the older Xeon CPU in common. What hardware are you running on?
I'd think if this were a memory leak, it would be something that would affect many more customers. But just purely speculative.
It would be nice to get some additional feedback from Palo Alto Networks.I think they've been tracking this as an issue but I'm not sure if it's been resolved yet - or if it will be. If it's related to CPU architecture, it may have been a conscious decision to not support aging hardware.
... View more
02-07-2023
10:48 AM
Hello,
I am running into the same issue with the PAN-OS VM-Series Base Image for PAN-OS 11.0.
It may very well be that this issue is related to the CPU(s) powering the hypervisor and not that the issue is specific to Hyper-V.
In my case, the CPU is indeed an older Intel Xeon processor, but I am running on VMware ESXi - not Microsoft Hyper-V.
VMware ESXi 6.7.0 Update 2 (Build 13981272)
ProLiant DL360 G7
12 CPUs x Intel(R) Xeon(R) CPU E5649 @ 2.53GHz
@Gabeeh I tried following your recommendation. I booted the VM into the maint partition and tried performing a factory reset. This is a net-new VM-Series build.
I've also tried upgrading an existing VM-Series running 10.2 to version 11.0 and get the same error message as soon as I try to login as user 'admin' from the console.
I've included a copy of the log from VMware ESXi in the event it can provide anything useful in support of the known issue.
The network interface seems to have initialized and I can ping it, but neither SSH nor HTTP/HTTPS are listening, so I am unable to login via the network.
Do you happen to know if this is an issue that will be resolved? Or will the older CPU simply no longer be supported?
Thanks in advance!
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks