This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About boblin
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About boblin
05-30-2023
27Posts
1Like
0Solutions
May 30, 2023Last Visited
User
Activity
User
Profile
Latest posts by boblin
| Subject | Views | Posted |
|---|---|---|
| 107 | 05-23-2023 08:23 AM | |
| 334 | 05-12-2023 05:17 PM | |
| 344 | 05-11-2023 02:38 PM | |
| 323 | 05-11-2023 02:25 PM | |
| 370 | 05-11-2023 01:30 PM | |
| 367 | 05-11-2023 01:14 PM | |
| 375 | 05-11-2023 12:38 PM | |
| 431 | 05-10-2023 06:48 PM | |
| 392 | 05-10-2023 06:29 PM | |
| 430 | 05-10-2023 09:34 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 05-11-2023 02:38 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
My LIVEcommunity Articles Contributions
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 0 |
User Badges
Community Statistics
| Member Since | 12-28-2020 03:15 PM |
| Date Last Visited | 05-30-2023 01:04 PM |
| Posts | 27 |
| Total Likes Received | 1 |
05-23-2023
08:23 AM
Our GloablProtect SSL had expired. We renewed it, but the Certificate period shows end 07/18/2023. It should be 07/18/2024. I call GoDaddy support. They say the certificate is good for another year and ask us to rekey it.
Current Certificate Validity Period
5/16/2023 - 7/18/2023
Subscription Period
6/16/2022 - 6/16/2024
I think maybe we didn't do it right. Any help or sugegstions?
... View more
05-12-2023
05:17 PM
This is how I fix the problem step by step with screenshots:
DUO MFA popup twice for approval login GloablProtect
... View more
05-11-2023
02:38 PM
1 Kudo
Yes, you are right. From the Monitor, I can tell many dropbox URLs. I added them to allow list that fixed the problem. Then I thought the problem might come back if Dropbox uses more other URLs. Therefore, I created a policy. Thankyou!
... View more
05-11-2023
02:25 PM
I fixed the problem by adjusting the timeout. Thank you!
... View more
05-11-2023
01:30 PM
I have both Generate cookie for authentication override and Accept cookie for authentication override checked. Is this you talking about?
... View more
05-11-2023
01:14 PM
I fixed the problem by creating a policy: http://www.howtonetworking.com/blog/2023/05/10/creta-a-policy-to-allow-accessing-dropbox-on-pa-firewall/
... View more
05-11-2023
12:38 PM
I have just one DUO authentication for both. Where to configure authentication cookies?
... View more
05-10-2023
06:48 PM
We configured PA 850 firewall to use DUO for GloablProtect MFA. It works. However, we have an issue. In GloablProtect Gateway Configuration>Agent>Client Settings, if I add a user, for example blin. it works fine. If I add a AD OU, for example Employees, the login user will get two DUO aoorval popup twice.
From the DUO Authentication, I can see two Granted.
Why it works if I add a user manually one by one, but it popup for two MFA approvals if I add the group or UO to the Gateways?
... View more
05-10-2023
06:29 PM
I configured DUO Proxy for GloablProtect MFA redundancy on our PA 850 firewall using Authentication Sequence. This post shows how I configured: Configure two duo proxy servers for Palo alto firewall MFA redundancy – Net/PC How to (howtonetworking.com)
The problem I have is when the top Authentication profile or DUO Proxy server is down, then the user can't login to GloablProtect. The DUO Proxy server and PA authentication profile is not the issue because I can run the test command successfully.
test authentication authentication- profile <authentication-profile-name> username <username> password
Alos, if I move the second profile (DUO Authentication-2 in my example) to the top, it works.
The problem is if the top authentication DUO proxy server (DUO Authentication-2) is down, no one can't login. MONITOR>Logs>System doesn't have authentication information. If I move the second authentication profile (DUO Authentication in my example) to the top, then it works again. I think it is Authentication Sequence problem but can't figure out how to fix it.
... View more
05-10-2023
09:34 AM
We have added dropbox.com to OBJECTS>Custom Objects>URL Category. We can login dropbox online. However, can't download files with these errors: .pdf files are supported but something went wrong or There was an error downloading your file. Any help?
... View more
04-29-2023
02:12 PM
Thank you for all help.
I just created a step by step how to
Configure two duo proxy servers for Palo alto firewall MFA redundancy
Hope that helps other people.
... View more
04-27-2023
08:44 AM
Thank you for quick reply. Do you have document for configuring active/active or an link?
... View more
04-27-2023
08:31 AM
Tom.
Now, the I have two DUO profile in the authentication sequency and it works. However, it seems to me this is active/passive. How can we setup active/active or balance?
... View more
04-26-2023
06:31 PM
How do you run 'test authentication authentication-profile'? I keep getting Invalid syntax.
... View more
04-26-2023
06:18 PM
The second DUO Proxy server configuration is correct and works if I don't use authentication sequence . For example, the first duo proxy IP is 10.0.0.119
in RADIUS Server profile, if you change the IP to second DUO proxy 10.0.0.183, it works.
If in Authentication Profile, I have two profiles.
and authentication sequence has two profiles.
Only DUO Profile works. If I stop the first duo proxy server, it doesn't work.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-30-2023
01:04 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks