About florianmoje

florianmoje · ‎01-05-2012

Hello, after updating to 4.1.1 it seems to be that filtering applications doesnt work any more. We have several security policies, where only ssl and web-browsing is allowed, but I can open eg youtube, netviewer, flash, google-video and other aps... Here is an example where google-video is allowed, but in the security policy, there is only ssl/web-browsing allowd: Log entry: Matching policy: Is this a bug?

florianmoje · ‎12-26-2011

this is a active/active config. the problem has solved itself after recommiting...

florianmoje · ‎12-15-2011

Hi, I wonder if portals/gateways config are automatically synchronized in a HA environment or do the have to be created manually on each devce? On our passive HA unit, there are no portals/gateways shown under global protect (only on the active unit). thx

florianmoje · ‎10-06-2011

thx fot the answer, I checked the virtual devsrvr/mgmtsvr memory, it is about 200m, so far away from 800m. I think the problem is related to the ts-agent itselt. By restarting the service on the terminal server the problem is solved so far, but reoccurs again after some time. Like I said, the ts-agent doesnt commit the correct username like DOMAIN/USERNAME instead it commits DOMAIN/DOMAIN to the firewall, what is denied. temporarely I created a task which restarts the agent server every 30 mins, but that cannot be definite solution. I think the PA supports needs to look at this...

florianmoje · ‎10-04-2011

Hi, we ve got a problem with the TS Agent on out terminalserver. After some time the TS Agent doesnt submit new users to the PA Device or the users submitted have a form error. Nomally the syntax is domain\username, but when the error occurs all submitted users have the syntax domain\domain (look at the logs below). Prior to this we can see some events in the logs like "User logoff on session xx with other session still exists". We can solve the problem by restartet the TS Agent... Some ideas? Thx 10/04/11 14:59:55[Info 1840]: User logoff on session 10 with other session still exist. <<-- is this correct? 10/04/11 15:00:06[Dump 1227]: Client thread 0 enum events 1! 10/04/11 15:00:06[Dump 1538]: Client thread 0 recv packet 2. 10/04/11 15:00:06[Dump 1573]: Client thread 0 SSL write msg 39 52 bytes! 10/04/11 15:00:06[Dump 1227]: Client thread 0 enum events 0! 10/04/11 15:00:27[Debug 211]: Session 1 notify type 3(Remote Connect). 10/04/11 15:00:27[Debug 635]: Receive session notify event. 10/04/11 15:00:28[Debug 211]: Session 1 notify type 5(Logon). 10/04/11 15:00:28[Debug 635]: Receive session notify event. 10/04/11 15:00:28[Debug 1669]: Session 1, username wmustermann. 10/04/11 15:00:28[Debug 1678]: Session 1, domain name DOMAIN. 10/04/11 15:00:28[Info 1705]: User DOMAIN\DOMAIN logon again with another session. <<-- wronmg syntax! 10/04/11 15:00:28[Info 1775]: User DOMAIN\DOMAIN logon finishes on session 1. <<-- should be DOMAIN\wmustermann! PA has 4.05 with newest TS agent x64

florianmoje · ‎08-17-2011

Hi there, we use the pan-agent installed on a DC to read out the users of some AD groups. Works fine so far. The only problem we got is, that if a user is removed from an AD group, I will always have to run the "clear uid-gids-cache" command on the device to get the user removed from the PAN cache. The pan-agent doenst show the removed user any more and a "show user pan-agent user-IDs" also doenst show the user, so it must be in cache. Is there a way to automate that process or is there a way to set the uid-gids-cache timeout on the device? Device is a PA500 with PAN 4.0.4

Member Since	‎07-22-2011 05:14 AM
Date Last Visited	‎05-20-2020 05:05 AM
Posts	6

Online Status	Offline
Date Last Visited	‎05-20-2020 05:05 AM

About florianmoje

App Filter doenst work

Re: Global Protect Portals/Gateways HA sync

Global Protect Portals/Gateways HA sync

Re: TS-Agent problem

TS-Agent problem

uid-gids-cache timeout