About tecnatomsa

tecnatomsa · ‎12-16-2014

Is there a way to block access to a specific shared folder of a file server? I need to block the Access from a network , but only one shared folder of a file server.

tecnatomsa · ‎05-19-2014

How can I redirect that users??? That users could be in the same network as domain users.

tecnatomsa · ‎03-14-2014

Hello, I have a problem/doubt with the user-id and in particular with the identification of the local machine users. Internet access is only allowed for domain users and if the users enter in their computer with the domain account They don't have problems, but some times when the users enter with a local machine account the UIA installed in a server ,after the periodic WMI check, shows that the user is "localmachine/user" instead of "domain/user". Is it possible to aovid that the UIA identifies a non domain account as a valid account?

tecnatomsa · ‎04-24-2013

4.1.8-h3

tecnatomsa · ‎04-24-2013

I can't see my sub-interfaces from the CLI (active)> debug dataplane packet-diag set filter match ingress-interface ethernet1/1 ethernet1/1 ethernet1/11 ethernet1/11 ethernet1/12 ethernet1/12 ethernet1/13 ethernet1/13 ethernet1/14 ethernet1/14 ethernet1/15 ethernet1/15 ethernet1/16 ethernet1/16 ethernet1/2 ethernet1/2 ethernet1/3 ethernet1/3 ethernet1/4 ethernet1/4 ethernet1/5 ethernet1/5 ethernet1/6 ethernet1/6 loopback loopback tunnel tunnel vlan vlan <value> Ingress hardware interface name (active)> show interface all Show all interface information ethernet1/1 ethernet1/1 ethernet1/1.41 ethernet1/1.41 ethernet1/11 ethernet1/11 ethernet1/12 ethernet1/12 ethernet1/13 ethernet1/13 ethernet1/14 ethernet1/14 ethernet1/15 ethernet1/15 ethernet1/16 ethernet1/16 ethernet1/2 ethernet1/2 ethernet1/2.43 ethernet1/2.43 ethernet1/3 ethernet1/3 ethernet1/3.45 ethernet1/3.45 ethernet1/4 ethernet1/4 ethernet1/4.46 ethernet1/4.46 ethernet1/5 ethernet1/5 ethernet1/5.22 ethernet1/5.22 ethernet1/6 ethernet1/6 ethernet1/6.40 ethernet1/6.40 hardware Show all hardware interface information logical Show all logical interface information loopback loopback management Show management interface information tunnel tunnel vlan vlan <value> <name> interface name

tecnatomsa · ‎04-24-2013

How can i capture the packets for only one VLAN? I have a virtual Interface ethernet1/6.40 and if i use a filter for only the interface (ethernet1/6) the PA doesn't capture anything.

tecnatomsa · ‎10-20-2011

Works the User-ID XML API only with LDAP Agent or works too with AD Agent? We need to make a logof script to delete the entries of some users.

tecnatomsa · ‎10-19-2011

I have some problems with user identification and I'm very confused about how it works. In the case that we use User-ID agent with AD. Is it the following process correct? 1.A user makes a logon in PC-A , with his domain credentials. 2.An event is created in Security log (ID 4768/4769/4770) "LOGON USER-A -> PC-A" 3.User-ID agent check the security log every 1 second for new events and asociates PC-A -> USER-A 4.Paloalto Firewall detects trafic from PC-A and query User-ID agent for Ip-user mapping. 5.Paloalto Firewall queries Agent every 5 seconds to check any changes in ip-user mapping. .... 10 minutes later... 6. USER-A closes his session. 7.USER-B makes a logon in PC-A, with his domain credentials 8.An event is created in Security log (ID 4768/4769/4770) "LOGON USER-B -> PC-A" 9.User-ID agent checks the security log every 1 second for new events and asociates PC-B -> USER-A ....or is it neccesary wait till age-out timer? 10. Paloalto Firewall queries Agent every 5 seconds to check any changes in ip-user mapping and detects the new ip-user mapping.

tecnatomsa · ‎10-17-2011

I have some doubts about your answer, because I'm comparing running configuration and peer runnning configuration. I upgraded to 4.0.5 and the sync fails between peers.

tecnatomsa · ‎10-16-2011

I want to know what is the meaning of the colors that apears in a configuration comparison (red, green....)

tecnatomsa · ‎08-12-2011

We have a new pair of PA-2050 (HA). The last two weeks works fine with 4.0.1 but last Thursday I upgraded them to 4.0.4 and two of our networks had problems to go trought the firewalls. I saw in the traffic monitor that the rules were ok and that traffic were allowed, but the response not reach any equipments of that network. Then i use wireshark and saw thath the mac destination from the firewall was 00:00:00:00:00:00, the packet that go into the PA interface was correct (with origin and destination MAC) but the response had the correct source MAC but incorrect destination MAC. I solved it with a downgrade to 4.0.1.

Member Since	‎07-22-2011 09:30 AM
Date Last Visited	‎07-10-2020 03:13 AM
Posts	11

Online Status	Offline
Date Last Visited	‎07-10-2020 03:13 AM

About tecnatomsa

Block specific Shared Folder

Re: UIA - Not domain user Identification Problem

UIA - Not domain user Identification Problem

Re: Packet Capture (VLAN)

Re: Packet Capture (VLAN)

Block specific Shared Folder

Re: UIA - Not domain user Identification Problem

UIA - Not domain user Identification Problem

Re: Packet Capture (VLAN)

Re: Packet Capture (VLAN)

Packet Capture (VLAN)

Works User-id XML API with AD agent?

User-ID doubt

Re: Compare Configurations Files (What is the siginificate of each color?)

Compare Configurations Files (What is the siginificate of each color?)

MAC Destination Problem (4.0.4)

Network Security

Cloud Security

Security Operations

About tecnatomsa