About Strachf

Strachf · ‎04-02-2023

We have the PA User-ID agent installed and configured on a Windows 2019 DC. The problem arises when I enable the "Domain Networks" defender firewall the agent losses the connection to the PA firewall under "Connected devices" in the agent view. Disable the "Domain Networks" defender firewall and all is working fine. I have added the PA User-ID agent "UaService.exe" in the outgoing and incoming firewall rules to be allowed but that has no effect.

Strachf · ‎02-24-2015

Another here. Would love to have this feature now please.

Strachf · ‎08-21-2014

I am getting the same issue on my PA-2050 using PA OS 6.0.3 top - 12:38:40 up 46 days, 4:06, 1 user, load average: 16.20, 14.47, 9.41 Mem: 942232k total, 918288k used, 23944k free, 872k buffers Swap: 2008084k total, 1206204k used, 801880k free, 97004k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 2540 root 20 0 946m 287m 4188 S 16 31.2 1326:32 mgmtsrvr 2539 root 20 0 364m 89m 7904 S 0 9.7 1736:31 devsrvr 2564 root 20 0 691m 74m 1696 S 0 8.1 540:43.88 logrcvr 2523 root 20 0 195m 67m 63m S 0 7.4 537:13.90 useridd 27243 nobody 20 0 230m 30m 4320 S 0 3.3 97:26.05 appweb3 25316 root 30 10 61384 14m 5444 D 0 1.6 0:00.91 pan_logdb_index 14141 nobody 20 0 203m 14m 3296 S 65 1.6 1167:41 appweb3 2087 root 0 -20 79320 8940 2068 S 0 0.9 389:30.83 masterd_apps 2570 root 20 0 207m 5660 2332 S 0 0.6 92:02.36 sslmgr 13805 root 20 0 5376 5252 2748 S 0 0.6 0:01.56 ntpd 21338 admin 20 0 106m 4336 832 S 0 0.5 0:06.85 cli 2113 root 20 0 99.7m 4060 1280 S 0 0.4 19:28.60 dagger 2114 root 30 10 42836 3848 1740 S 0 0.4 220:48.80 python 2575 root 20 0 116m 3304 1892 S 0 0.4 87:05.35 authd 2098 root 15 -5 41332 2348 1216 S 0 0.2 723:19.93 sysd 2572 root 20 0 82668 1976 1180 S 0 0.2 31:04.69 dnsproxyd 2574 root 20 0 147m 1876 1152 S 0 0.2 34:44.52 routed 2567 root 20 0 217m 1788 1424 S 0 0.2 111:03.09 varrcvr 2121 root 20 0 137m 1712 1192 S 0 0.2 43:44.09 sysdagent 14106 nobody 20 0 104m 1664 1372 S 0 0.2 17:01.23 appweb3 2350 root 20 0 95244 1576 1208 S 0 0.2 22:37.49 cryptod 2569 root 20 0 116m 1476 1228 S 0 0.2 29:17.18 satd 2563 root 20 0 84236 1420 1228 S 0 0.2 21:56.60 ikemgr 2145 root 20 0 84956 1380 1076 S 0 0.1 30:29.08 chasd 2568 root 17 -3 66604 1376 1052 S 0 0.1 26:05.06 ha_agent 2573 root 20 0 80340 1248 1092 S 0 0.1 23:00.67 pppoed 2565 root 20 0 102m 1236 1064 S 0 0.1 23:11.16 rasmgr 5058 root 20 0 49888 1236 1032 S 0 0.1 32:18.81 snmpd 2571 root 20 0 67204 1188 1056 S 0 0.1 26:40.90 pan_dhcpd 25331 root 20 0 3828 1172 1036 D 0 0.1 0:00.23 sh 2144 root 20 0 36052 1128 972 S 0 0.1 40:15.44 ehmon 2566 root 20 0 101m 1124 992 S 0 0.1 23:35.00 keymgr 2143 root 20 0 67660 1080 948 S 0 0.1 25:17.97 brdagent 21305 root 20 0 21316 1080 1016 S 0 0.1 0:00.30 sshd 25228 admin 20 0 4528 1060 808 R 49 0.1 0:02.00 top 21780 root 30 10 3892 1052 880 S 0 0.1 0:00.79 genindex.sh 21333 admin 20 0 21452 820 640 S 0 0.1 0:00.40 sshd 5063 root 20 0 8792 788 680 S 0 0.1 0:18.63 syslog-ng 2391 root 20 0 6844 780 752 S 0 0.1 0:00.11 sshd 1912 root 20 0 2108 668 664 S 0 0.1 0:00.06 rpc.statd 2392 root 20 0 6780 668 664 S 0 0.1 0:00.05 sshd 13778 root 20 0 2896 656 596 S 0 0.1 0:00.18 crond 1874 root 20 0 2004 632 588 S 0 0.1 0:14.43 syslogd 1977 root 20 0 3276 628 624 S 0 0.1 0:00.02 xinetd 2007 root 20 0 2608 628 560 S 0 0.1 0:17.35 rpc.mountd 2142 root 20 0 7208 624 620 S 0 0.1 0:00.13 tscat 1 root 20 0 1832 600 576 S 0 0.1 1:10.71 init 1894 rpc 20 0 2076 484 480 S 0 0.1 0:00.01 portmap 2090 root 20 0 1884 456 452 S 0 0.0 0:00.01 agetty 867 root 16 -4 1992 384 380 S 0 0.0 0:01.06 udevd 1877 root 20 0 1888 368 364 S 0 0.0 0:00.05 klogd 1886 root 20 0 1868 328 232 S 0 0.0 13:44.25 irqbalance 5062 root 20 0 4796 212 208 S 0 0.0 0:00.01 syslog-ng 2 root 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd 3 root RT 0 0 0 0 S 0 0.0 0:24.12 migration/0 4 root 20 0 0 0 0 S 0 0.0 8:24.78 ksoftirqd/0 5 root RT 0 0 0 0 S 0 0.0 0:23.39 migration/1 6 root 20 0 0 0 0 S 0 0.0 8:04.71 ksoftirqd/1

Strachf · ‎07-24-2012

Is it possible to block youtube totaly but allow youtube videos to be played from a particular site?

Strachf · ‎05-23-2012

Thank you. Got it working.

Strachf · ‎05-22-2012

Our business has a Facebook page but as a policy we have Facebook blocked as a whole. Is it possible to unblock certain pages in Facebook only (eg. www.facebook.com/mybusiness) but maintain deny access to every other page?

Strachf · ‎10-17-2011

Yes - it has been enabled hence it checking for a CRL..

Strachf · ‎10-16-2011

Hi, I have just noticed that my PA-2050 has in it's system logs regular entries as follows: Failed to get CRL http://crl.godaddy.com/gds1-16.crl I also get similar entries for every different certificate server I can think of. Reason I ended up looking at this stuff was actually for a different certificate error. The other problem I get is when I log into my terminal servers. These servers are setup in a farm with rdp gateway installed. This worked perfectly when we had ISA as our gateway. Now that we have switched to the PA-2050 we get an error message on login. The error message is: A revocation check could not be performed. I have been able to get around it by putting some manual entries into the rdp file. However ideally I would like to fix this permanently. Any thoughts?

Member Since	‎07-05-2011 12:20 AM
Date Last Visited	‎04-02-2023 09:48 PM
Posts	9

Online Status	Offline
Date Last Visited	‎04-02-2023 09:48 PM

About Strachf

User-id Agent Windows defender firewall issue

Re: Youtube Edu

Re: PA-500 CLI and web interface unbearably slow

Limited youtube access to a particular site.

Re: Facebook limited filtering

Facebook limited filtering

Re: CRL not downloading

CRL not downloading