Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
01-12-2018
11Posts
1Like
0Solutions
Jan 12, 2018Last Visited
User
Activity
User
Profile
Latest posts by cmaier
| Subject | Views | Posted |
|---|---|---|
| 1090 | 07-19-2013 10:10 AM | |
| 3086 | 05-24-2012 06:22 AM | |
| 3086 | 05-17-2012 10:13 AM | |
| 476 | 11-10-2011 08:00 AM | |
| 650 | 11-07-2011 01:50 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 07-19-2013 10:10 AM |
User Badges
Public Statistics
| Date Registered | 08-23-2011 04:38 PM |
| Date Last Visited | 01-12-2018 11:55 AM |
| Total Messages Posted | 11 |
| Total Likes Received | 1 |
07-19-2013
10:10 AM
1 Kudo
+1 for the ability to search on threat name and use some sort of wildcard language.
... View more
05-24-2012
06:22 AM
In my case, the two vulnerabilities (#1 is the intial sensor for the offending traffic, #2 is the time based vulnerability for it) keep incrementing after the block-ip events. Attached is the log that shows the problem. These are all attacks from the same source IP - I have the block set to 5 minutes, but it never blocks them. FYI - I have an active case going that's made it to engineering.
... View more
05-17-2012
10:13 AM
Ronald, Did you get anywhere with this? I have a custom vulnerability that I'm trying to have block IP's, and it won't. Same as you - the action says block-ip in the threat log, but that attack continues..... Thanks, Chris
... View more
11-10-2011
08:00 AM
I've been messing with the setup of using multiple ISP's in an office and maintaining the functionaility of an inbound VPN client for both - aka redundancy. I guess my first question is, can a client have a Global Protect installation that is able to connect to multiple gateways? I haven't seen anything to indicate it's possible yet - maybe I just don't know how to do it.... On the PA side, are there any tricks to getting more than one inbound Global Protect gateway/portal set up? Thanks in advance! Chris
... View more
11-07-2011
01:50 PM
Hello! I was running some fail-over tests the other night and ran into some issues with my switch's ARP table updating correctly. I have attached a diagram that shows all of my PA connections into the switch stack. In a nutshell, I have a switch carved up into a number of different VLAN's, each having their own router interface and IP. I have applied policy based routing to each of the VLANs interfaces that matches any traffic destined for any other VLAN and routes it to the back-end vsys of the PA. When I fail over, the switch ARP table doesn't get updated correctly and inter-VLAN traffic doesn't route through the back-end like it should. As soon as I clear ARP on the switch, it works. Based on that information, is there anything in the PA config that would prevent GARP from going to the switch on all of the interfaces? I'm trying to determine if my switch is the issue and not updating like it should.
... View more
08-29-2011
08:23 AM
I'm new to the 5060 and I'd like to phase in some IPS functionality over the next week. This is a production system sitting in front of fairly busy site, so I'm a little nervous.... especially being totally new to the PAN OS. What's the best approach in configuring some of the IPS features and applying them to my front-end traffic? Is there an easy way to apply this in a "transparent" mode so I can just see what it sees and then start to enforce blocking as needed from there? Thanks in advance.
... View more
08-29-2011
08:12 AM
Raj, Your explanation is exactly what I did and it seems to be functioning OK - L3 subinterfaces of the agg group that are tagged and IP'ed. I was concerned initially because I wasn't able to ping any of the subinterfaces, but reading through some other posts, I realize I have to create an Interface Mgmt Profile in order to gain this "functionality." Thanks! Chris
... View more
08-25-2011
02:14 PM
When setting up virtual systems, what are the general guidelines for settings in the resources tab. Do they have to be filled in with a number? If left blank, how does the system divide resources?
... View more
08-25-2011
01:55 PM
I have a 5060 I'd like to carve up and use one of the vsys's on it for a back-end firewall. My plan was to take two of the 10Gb ports and LAG them together, sending all 4 of my vlans in and out on that one trunk. Will that work, or is there a better way to architect this setup? I'm a little lost in setting this up and creating the vlans to reside within it.
... View more
08-25-2011
10:07 AM
OK, just to make sure I understand this correctly... If I want traffic to hit a destination IP, I leave the Destination Zone as Any and enter the IP in Destination Address?
... View more
08-24-2011
12:51 PM
This is a simple one, but I couldn't find it specifically stated in the manual. When I define a security policy, are the Zone and Address exclusive of each other? In other words, if I select a zone,it requires I put in specific IP's or select Any. If I leave the IP's as any, but select a specific zone, will it only allow IP's from within that zone - or will it allow Any in addition to the zone? Or do I have to select the zone and then specifiy what IP's in that zone I want to have the policy apply to? I hope that makes sense - the only way I could come up with to explain it seems a bit confusing - even to me....
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
