This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About JohnP
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About JohnP
08-10-2021
7Posts
2Likes
0Solutions
Aug 10, 2021Last Visited
User
Activity
User
Profile
Latest posts by JohnP
| Subject | Views | Posted |
|---|---|---|
| 3497 | 02-10-2012 06:25 AM | |
| 3937 | 02-08-2012 03:41 AM | |
| 4163 | 01-27-2012 02:40 AM | |
| 3768 | 07-29-2011 11:07 AM | |
| 4289 | 07-27-2011 05:33 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 07-22-2011 01:20 AM | |
| 1 Like | 07-21-2011 05:36 AM |
User Badges
Community Statistics
| Member Since | 07-13-2011 05:41 AM |
| Date Last Visited | 08-10-2021 01:25 PM |
| Posts | 7 |
| Total Likes Received | 2 |
02-08-2012
03:41 AM
Jdelio: Thanks for the link, I guess i'll have to wait to see what happens in this space.
... View more
01-27-2012
02:40 AM
Hi guys, can anyone point me in the right direction to find out if User-ID supports IPV6 address and if so how does that work. I assume that the only the primary IP address which gets authenticated on the domain gets logged and therefore reported to the PA. So I'm guessing that in a dual stack LAN all of the possible addresses do not get logged against the users name, and especially not the IPv6 temporary / privacy address. anyone have any info for me or can point me in the right direction it would be much apprechiated.
... View more
Labels:
- Labels:
-
User-ID
07-29-2011
11:07 AM
Thanks for your response Phill I was under the impression this was how the Firewall did it's application detection as standard. let a few packets through watch for the return and then tag the application by the signature of the send / response traffic. surely if i allow unknown-tcp as an application type on a policy, any application not referenced in the application list on the PA will be allowed through that policy. (or am I missing something here) I know there are a lot known applications but I'm assuming there are more unknown. As for the port scaning ability of skype I thought that was handled by the "skype-probe" application thats why to effectively block skype you: allow application skype-probe block application skype
... View more
07-27-2011
05:33 AM
Why is 'unknown-tcp' an application dependency of Skype, is it possible to remove a dependency from a pre-defined application. Or do we have to setup an application overide? I don't really want to allow unknown-tcp 'apps' just to allow someone to use Skype. And if something is unknown how does the Firewall match on something which is unknown? Thanks
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks