About icartwright

So, I've got this all set up and running in my lab. I'm running into an issue where after browsing to Youtube and choosing a video, sometimes the PAN firewall identifies the app as "youtube-streaming". The video page shows, but the video itself doesn't play (because "youtube-streaming" isn't allowed in any rule, it gets blocked). This happens whether the video is supposed to be allowed or not (neither rule matches because neither of them have "youtube-streaming" in them).   If I add "youtube-streaming" to either rule, all Youtube videos are allowed when the application is "youtube-streaming" because that application doesn't get passed to the URL filtering engine (I think). There are no logs under Monitor > URL Filtering where the application is "youtube-streaming". There are some for both google-base and youtube-base.   What could be going on here?   I am running PANOS 8.1.5 on a VM-100 with current licenses for everything (if that helps).   Thanks. ... View more

@gwesson @MarkRosenecker I wouldn't say that this is a universal issue for all VPN vendors... If one were to search the interwebs for KB43862 of a competitor's product, one would find instructions for how to use email to distribute the certificates and add them to the proper app so that they can be used with SSL VPN. This particular process does not work for GlobalProtect at the moment, but I would hope that PANW updates the GP app very soon to support it. ... View more

Hello all,   Can someone detail the steps they took to "reimport" the certificates for an unmanaged iOS device? I reimported the certs I use for Global Protect and I still can't authenticate to my Gateway. I used the same steps to import the certs that I've always used: email the certs to myself; import in this order: CA, Intermediate, Client; trust the CA under Settings>General>About>Certificate Trust Settings. I still get the same error I was getting before:   GlobalProtect gateway user authentication failed. Login from: xxx.xxx.xxx.xxx, Source region: US, User name: , Client OS version: Apple iOS 12.0, Reason: client cert not present, Auth type: profile.   BTW: I use two-factor auth in the form of local username/password and a shared client certificate.   Thanks. ... View more

I had to add these exclusions as well for Windows Updates and Windows Defender Definition Updates to be downloaded to a Windows PC. ... View more