This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About jseals
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About jseals
04-28-2017
214Posts
37Likes
57Solutions
Apr 28, 2017Last Visited
User
Activity
User
Profile
Latest posts by jseals
| Subject | Views | Posted |
|---|---|---|
| 1877 | 05-13-2012 11:32 AM | |
| 1699 | 05-13-2012 11:16 AM | |
| 2497 | 05-11-2012 11:24 PM | |
| 2315 | 05-11-2012 11:22 PM | |
| 3334 | 05-03-2012 10:32 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 03-21-2012 09:56 PM | |
| 1 Like | 03-26-2012 02:48 PM | |
| 1 Like | 03-23-2012 02:27 PM | |
| 1 Like | 03-22-2012 08:02 PM | |
| 1 Like | 04-05-2012 11:47 PM |
User Badges
Community Statistics
| Member Since | 07-05-2011 11:36 AM |
| Date Last Visited | 04-28-2017 08:24 PM |
| Posts | 214 |
| Total Likes Received | 37 |
05-13-2012
11:32 AM
1 Kudo
Hi Richard, I haven't found a command just yet, but you should be able to goto the threat logs in the webUI, create an action filter that equals "block-ip" and run the filter in the logs. This should show you what IPs are getting blocked and when. On a side note, for this to be more real-time, you may want to enable logging at the start of the session for the rule that's logging your block-ip threats. -Jason
... View more
05-13-2012
11:16 AM
Hello, You may have your LDAP server profile configured with the FQDN domain name instead of the NETBIOS name. The domain field for the LDAP server profile should have the NETBIOS name. Anything in this field gets prepended to the user's name. For instance, if your domain is testdomain.com, the domain field should be: testdomain Here are two great documents to read over for UserID related issues and configuration in 4.1: https://live.paloaltonetworks.com/docs/DOC-2132 https://live.paloaltonetworks.com/docs/DOC-3120 Please let me know if this helps. -Jason
... View more
05-11-2012
11:24 PM
1 Kudo
You can clear the group cache on 4.1.x by doing the following: > debug user-id clear group all You can then force a group refresh: > debug user-id refresh group-mapping all -Jason
... View more
05-11-2012
11:22 PM
1 Kudo
Hi Mike, It sounds like you're running into a reported issue we've encountered here. There is a fix in 4.1.5 for this. I believe as a work-around you can edit parts of the profile in the security rule to force the response page switch. -Jason
... View more
05-03-2012
10:32 PM
1 Kudo
Hello, A shadow rule warning means that a more generic rule is configured above a more specific rule. Therefore, the generic rule is always hit and the more specific rule is never hit. Will packets flowing through the rulebase you have ever hit the rule that's being shadowed, or will they always hit the rule that is shadowing? If you feel this isn't the case for you, maybe give us examples of what your rules look like so we can help. -Jason
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks