About jforsythe

LIVEcommunity is all about ensuring we give our members the best experience possible.   Whether that's the Customer Experience Refresh we unveiled earlier this year, the addition of interactive events and increased product-focused webinars, or our updated FAQS section, our goal is to make LIVEcommunity resources and tools as easy to navigate, helpful, and information-rich as possible.    Our News & Events and Customer News pages are two areas that can help you quickly find the tips, tricks, and answers you're looking for. Here's why you should subscribe to these LIVEcommunity areas:   LIVEcommunity's News & Events page LIVEcommunity's News & Events page is where you'll find information about upcoming LIVEcommunity events, as well as our monthly Rewind column—which curates the most notable and newsworthy LIVEcommunity content at the end of each month—so that you can easily digest the latest LIVE happenings, all in one place.   LIVEcommunity is ramping up its events, and we've already hosted four Ask Me Anything events (AMAs)—including one with our Cyber Elite experts, happening now!—and interactive events with Palo Alto product experts, like our webinar on how to secure and seamless end-user experience for GlobalProtect deployments.   By subscribing to LIVEcommunity's News & Events page or checking it regularly, you'll ensure you never miss an event, news item, or Rewind column that could be helpful to you.    LIVEcommunity's Customer News page LIVEcommunity's Customer News page was a new addition during our CX Refresh, and an area we plan to utilize more often!    The Customer News page is where you'll find our Monthly Customer News roundups. This brand-new column highlights LIVEcommunity customer-only content, news and resources, as well as LIVEcommunity tools pertinent to our customer base and users of Palo Alto Networks services. (Read our June Customer News Roundup now!)    Got a suggestion for what other content you'd like to see on the Customer News page, an event you think we should host or, well, anything else at all? Drop us a comment below!    Thank you for reading—and don't forget to give a thumbs up.    ... View more

  To wrap up our Cyber Elite Spotlight Interviews, we’ll get to know LIVEcommunity Cyber Elite expert, Remo Mittler (@Vsys_remo). Our Cyber Elite members are among the top contributors within the LIVEcommunity and we are excited to be featuring them via our community interviews.     Remo is a Senior Security Engineer at Avectris AG, a Switzerland based full-service provider. His 14 years of experience in network security have helped him become an expert in firewalls, vulnerability management, log management, archiving, and multi-factor authentication infrastructure to name a few. Remo possesses a PCNSE certification along with several others that help him stand out in ranks of Cyber Elite experts.  Cyber Elite Spotlight Interview with Remo   We recently had an opportunity to talk to Remo about Palo Alto Networks (PANW), his journey in cybersecurity, and of course, being a LIVEcommunity Cyber Elite. Read on to get his thoughts on these topics and more.   What does being a LIVEcommunity Cyber Elite mean to you? It's nice that the time I spend with the LIVEommunity is recognized by this status, and that my contributions are of value... I admit that it makes me feel a little proud to be a Palo Alto Networks LIVEcommunity Cyber Elite member!   What was your first experience with Palo Alto Networks products/services? My first experience with Palo Alto Networks products was with a PA-500. Even with the really slow management webUI on this platform, it was clearly the beginning of something great. Compared to the other firewall vendors that was used back then, the Palo Alto Networks firewall did exactly what we configured and the updates were just working without spending hours or even days of troubleshooting with failed updates.   What motivated you to start engaging in LIVEcommunity? In the beginning, I used the community as source for information that I needed to solve problems. While reading some of the unanswered topics I realized that there are quite a few that I was able to answer—but to be honest, I didn’t. Some months later, I created an article where I shared some informations about QoS monitoring and started replying to topics where I thought my input would be helpful. While doing this more and more, I realized that it was not only helping others, but it was a great way for me to learn new things and get better in my job.   "I realized that it was not only helping others, but it was a great way for me to learn new things and get better in my job."   What keeps you coming back to LIVEcommunity? Helping others while learning at the same time and sometimes also to ask questions to the community. What is your message to newcomers in community? While searching for information in the community, do not hesitate to reply to topics! Maybe you will have the same experience as someone else and find out—like I did—that actively participating helps you almost in the same way as it helps others. Sharing is caring, and the more community members share their thoughts and information, the more everyone benefits.   Can you tell us about a typical day at work?  Actually, there is no "typical" day at work for me. There are days that are less special than others, where “normal” tasks like checking on the growing firewall infrastructure and monitoring tools, solving incidents, and planning the upcoming maintenance windows for software updates need to be done—but almost always there are new and challenging situations. For example, new projects, new requirements of customers that need to be implemented and, of course, new challenges of protecting the customers from cyberattacks and 0-days. Sometimes, during the workday I search for information and topics on LIVEcommunity where others may have faced the same challenges to see how others solved them. But my “active” participation in the community starts after the workday.   "Sharing is caring, and the more community members share their thoughts and information, the more everyone benefits." What do you enjoy doing in your free time? Walking around with my girlfriend in nature—especially on rainy days or, even better, in winter when there is snow on the ground. Our little dog is also always with us on these trips. I do it too rarely, but love to mountain bike and do little projects in my own home-network (which often take a lot more time than I intended).   Who is your Cybersecurity inspiration? This one is difficult to answer mainly because I am really bad at remembering names (with IP addresses and numbers I have less problems). I admire all the security researchers who continuously find vulnerabilities and disclose them responsibly to the vendors—on one side because of their technical knowledge to find these vulnerabilities, and on the other side for not selling this type of information on the black market or to vulnerability brokers. A source of inspiration—and also to get information about current security topics—is the weekly “Security Now” podcast by Steve Gibson and Leo Laporte.   ****   We hope you enjoyed getting to know a bit more about Remo. If you have any specific questions for Remo—or any of our Cyber Elite members—please ask any questions you may have for them and join our Cyber Elite Ask Me Anything event. Visit the link and ask your questions NOW through July 28!   You can always reach out to Remo in the community by tagging him in a post with his username @vsys_remo or post a comment in the section below.   Be sure to visit the Cyber Elite Program page to learn more.   ... View more

  AMA: LIVEcommunity Cyber Elite Experts  Starting July 14 and through July 28, LIVEcommunity members will have a chance to ask our Cyber Elite Experts questions about a range of technologies, solutions, and how they can help you find what you need.   Who are Cyber Elite members? The Cyber Elite members are our LIVEcommunity experts who closely engage with LIVEcommunity by sharing technical insights, knowledge, and assisting fellow community members in elevating their security posture. Their know-how and expertise helps others protect their companies and customers in an increasingly complicated world of cybersecurity. Cyber Elite experts demonstrate characteristics we believe exhibit the values that make up a vibrant and interactive technical community.    Ask questions from Wednesday, July 14 to Wednesday, July 28, 2021    We’re excited for you to join the discussion, ask your questions, and meet our experts! The LIVEcommunity Cyber Elites are as excited as we are to be part of an AMA, which is part of an ongoing series that invites LIVEcommunity members to engage with a variety of different Palo Alto Networks employees and technology experts.   Date/Time of AMA Event:  Wednesday, July 28 8 a.m. to 5 p.m. PDT Featured Experts:        To participate  in this Ask Me Anything event, please join the discussion!  ... View more

  This blog was written by Cyber Elite member @vsys_remo.   Have you ever seen a port-knocking feature on other firewalls or router vendors and were looking for something similar on Palo Alto Networks? Or were you searching for a way to secure and emergency access to a critical server, or even to the firewall interface over the internet—but you don't want to expose this to the complete internet, Actually, you don’t want do expose it at all. If this sounds familiar to you, then this post is for you.   With features included in PAN-OS without any additional subscription, it is possible to secure a critical access. This access is not detectable by any scans—which happen continuously in the internet (for example from shodan.io or actual threat actors)—and at the same time, it's easy to use and enables access from anywhere sans an IP address. Even if you're not looking for this creative solution, this post offers ideas and possibilities when using a Palo Alto firewall (and might lead to even better use cases).    So let’s start. In my example I will secure my global protect access. I don’t want this VPN gateway to be discoverable by anyone. Prior to this idea, I was working with geolocations but even this restriction was not good enough for me (a very paranoid person in some situations). At the beginning, I wrote the keyword port knocking. With this in mind I searched for a way to implement that. In the past, I used the built in actions in log-forwarding profiles (logforwardingprofile) to dynamically add some IPs to special decryption rules where the cert validation was disabled, so I started with this here too.   I created a deny firewallrule with a specific port and my GlobalProtect Gateway IP as Destination IP. On this rule, I configured a logforwardingprofile with a built in action to tag the source IP which is then added to an address group that is allowed to connect to GlobalProtect. So far, pretty easy: I send a TCP-SYN to a specific port and after that I am able to connect withGlobalProtect. Unfortunately this was still not secure enough to me as a port scan of all TCP and UDP ports is done pretty fast and after that also an attacked would be able to reach my GlobalProtect Gateway IP—even though the attacker still has no credentials to access the internal network with a VPN tunnel. So right know the chance for a successful attack is 1:131072 (65536 tcp ports and 65536 TCP ports) or actually pretty much higher as really only a simple port scan is required.   So, I brought this theory to the next level. I wanted to have five stages or doors that need to be opened prior to being able to establish a VPN connection. So with five times 131072 the possibility for a   successful attack is lowered to 131072^5 which results in a chance of 1:3.86856262×10 25 (1: 38685626227668133590597632). This chance is low enough to me so I went this way with a little adjustment. I wanted to implement a mechanism that there is only one guess for the port which will be knocked on. If this port is not guessed correctly at the first try, the IP will be locked out to make it virtually impossible to brute force this port knocking mechanism.     So I started with creating some tag objects which I will use later:   With these tags I created dynamic address groups for each of these tags:     For every one of these dynamic address groups there is the one matching tag criteria. For example, for the group Gr_Door_1_opened the tag «Door 1» is used as filter and so on:         The next step is to create the required security policy rules to configure this port knocking access. As I wanted five doors to be opened I need only for these five different rules where I specify different ports that need to be knocked on. After each port the next door will be opened.     In these six rules, I specified the different dynamic address groups as source. In addition, the first rule only has to match if the source IP has not already arrived at one of the other doors. So I specified the different groups with the negate option for the source IPs. These rules so far enable a port knocking feature where a «brute forcing» is still possible as a source IP could scan all the ports multiple times until the actual GlobalProtect ports are opened. There are some more rules required that prevent such scans of the full port range and so after some more rules the full port knocking ruleset looks like shown in the following screenshot:     After each rule where a door can be opened there is another drop-rule that will match for all other ports than the one which is required to access the next door.   The almost important part which enables all this I will describe now. In all these rules a specific logforwardingprofile is added where all this adding to dynamic address groups is configured. In order to add this «intelligence» of tagging the source IPs based on the access to the different doors, the logforwardingprofile needs some rules. I configured a log filter based on the rule name for these rules, so generally the profile looks like this:   As described and as you can see in the above screenshot, the filter is always looking for traffic of one of the security policy rules. The log type in all rules is traffic as I created only drop rules for this port knocking access. While the doors are knocked, the firewall does not answer in any way to the TCP-SYN packets (or UDP packets, but in my example I used only tcp ports so far), which reduces the chances of an unwanted access even more. It looks like there is absolutely nothing available here to an external scan. The actual rules in this logforwardingprofile are configured to add the tags to the source IPs, which results in adding the IPs to the dynamic address groups. With the following screenshots you can see all the details of the rules:   The following screenshot shows the matchlist (logforwardingprofilerule) that filters on access attempts to the Door 1.             Now the rule opening Door 2, there are two built-in actions. One is to open Door 2 for one minute and the other one is to close the door 1 (remove the source IP from the dynamic list of IPs that opened Door 1). With this step I will make sure that there is really only one guess for the port so even connecting again to the port of Door 1 will trigger a lockout.       Built in action to open Door 2 for one minute:       Built in action to close Door 1:       The following two rules that will open Door 3 and 5 are actually exactly the same as the one to open Door 2—simply with adding the IP to a different dynamic addressgroup.   Rule to open Door 3:   Built in action to open Door 3 for one minute:     Built in action to close Door 2:       Rule to open Door 3:   Built in action to open Door 4 for one minute:     Built in action to close Door 3:     The rule that opens the last door is now different in one little point. Instead of opening the door only for one minute (which is the min. value that can be entered) the access to GlobalProtect is granted for the source IP for 24 hours ( which i s1440 minutes).     Grant GlobalProtect access for one day:     Built in action to close Door 4:       After the rules that match connections to the correct ports, I need some more rules which kick in if there are connection attempts to the wrong ports. So these are required to make it virtually impossible to “guess” the right ports or find them with a port scan. The first rule matches for traffic to wrong ports after Door 1 was already opened. In addition to close the Door (remove the source IP from the dynamic address group that opened Door 1 the source IP will also be locked out for one hour.     Built in action to close Door 1:     Built-in action to lock out the source IP for one hour:     The remaining four rules will do the same as the rule before. The rules will remove the tag of the door which the source IP did reach at that point and will lock out this IP for one hour:   Built in action to close Door 2:     Built in action to lock out the source IP for one hour:     Log forwarding profile match list to close Door 3:   Built in action to close Door 3:   Built-in action to lock out the source IP for one hour:       Log-forwarding profile match list to close Door 4:   Built-in action to close Door 4:     Built-in action to lock out the source IP for one hour:       The last rule is actually also the same as the one before to close the doors. Here I just wanted to mention that even if Door 5 is the final one which allowed access to GlobalProtect for one day, this rule will be hit if there is anything else than the ports and applications required for GlobalProtect arrives at the firewall. Even when there is a established GlobalProtect connection, the source IP will be blocked if there is unspecified traffic:   Built in action to close Door 5:     Built-in action to lock out the source IP for one hour:     All this enables this port knocking access. For testing this you can use almost any port scanning app on a smartphone or existing command line tools on Windows, Linux and macOS. In a test where I knock the right ports and the doors are opened the IP-tag log looks like the following (by default there is also an IP column which I hided here):         I used a small PowerShell script, which only does one  TCP connection attempt to the destination IP. I used this because on my computer I am able to shortly run this script and after that I can connect to my GlobalProtect gateway. I did not use the basic command test-netconnection in PowerShell as it does multiple connection attempts and it also sends an ICMP ping. These multiple connection attempts and ping are a problem because then the first door is opened—but with the additional connection attempts, I always ended up locking myself out. I also added a short sleep period in the script after connecting to every port because depending on the hardware in use it takes some seconds for this IP address added to the right dynamic address groups. My little script looks like this:     After the step where the «Access granted» tag was added to the source IP, I am able establish the GlobalProtect VPN connection from anywhere in the world without opening only IP in general as source IP. If now someone tries to access my GlobalProtect IP the IP tag log is shown in the following screenshot. In this test the first and also the second doors are opened correctly but then the wrong port is accessed, so the source IP will be locked out for one hour (this log where the tag column is empty I don’t know exactly what this is about, but the important one is that the locked out tag is added and this works correctly):     That's it!   With this guide you should be able to implement such a port-knocking access on your Palo Alto firewall. Obviously, my implementation is not very practical for a company’s GlobalProtect access (unless you distribute a little script or application to your users computers which they have to execute prior to connecting to GlobalProtect). For me, this is working perfectly fine on my personal Palo Alto firewall. This could also be used for emergency access to the firewalls management WebUI or CLI in a secure exposure on the external internet-facing interface. Another use case would be a direct access to an internal jump host for situations when there are issues with your active directory or in the internal network in general. This way you could implement an emergency access (as long as internet access still works). Probably there are plenty of other use cases, so be creative and adapt this proposal as you need it. Of course, the door count could be reduced or increased to match your security requirements.   If you used this inspiration for something similar, it would be great if you share your implementation here in the live community. Also, completely different projects are welcome here so others can benefit from your ideas, change or improve them and share them again so everyone benefits.   Sharing is caring and stay secure, Remo @vsys_remo ... View more

  This week, Mohit Bhasin and Palo Alto Networks senior technical marketing manager Marcel Hoffman discuss and debunk the myth of the one-size-fits-all datasheet.   In "Security Speakeasy: Debunking the Firewall Datasheet," Hoffman talks about the importance of doing proof concept and evaluating the realistic performance of a firewall.  Firewall datasheets come in different shapes and sizes, and can be misleading if they don't match your real-word uses and specifics.    "Read the fine print, which often tells you what features were enabled, what was the traffic mix. Ask the vendor... You don't want to be in a situation when during an under attack you need a very specific security feature you haven't used before, have to enable it, and then you see that your firewall will not be able to handle the additional performance impact." —  Marcel Hoffman      When shopping for firewalls, you not only want to know what go beyond the datasheet with proof of concepts, but understand day-to-day administration and, yes, taking the firewall for a "test drive."   Watch the video below to learn more! You can also checkout LIVEcommunity's Next-Generation Firewall page, and find more information on datasheets and Palo Alto's NGFW after you're done.      The   Security Speakeasy YouTube Playlist is updated every Monday at noon PDT.    Want to learn more? Read our LIVEcommunity blog announcing the   Security Speakeasy series.     Thanks for joining us!  ... View more

    This year has been one of big change for the LIVEcommunity! In addition to our CX refresh—which included a new interface, events section, and navigation features—we also updated LIVEcommunity's FAQs page.   LIVEcommunity's frequently-asked-questions section covers how to get started in the community (including registering and signing in), how to participate in Q&As, what an Accepted Solution is and how to create one, and so much more.   Meet the new-and-improved FAQs section:         Where is it? First off, you can access the FAQ area from main menu > Get Started > FAQ       Why access it? From new to experienced users, the FAQ page is LIVEcommunity members' first stop when seeking an answer to commonly asked questions.   The FAQ has more than 20 areas focusing on every aspect of the LIVEcommunity, from getting started and searching to working with bookmarks and changing your avatar image.   FAQ section showing some of the questions   Still can't find your answer? We have spent countless hours answering users' questions in hopes of saving you time, effort, and ensuring that you get the most out of using LIVEcommunity.     If you still can't find an answer to your question or have something you'd like to see added to the FAQ, leave us a comment below! Your input and participation in this vibrant community is invaluable to us.   Or better yet, we have a dedicated Feedback area for the LIVEcommunity where you can post your questions and feedback for the LIVEcommunity there.    Please visit these pages for more information: LIVEcommunity FAQ page LIVEcommunity Feedback page   Thank you for reading and don't forget to give us a thumbs up!   ... View more

  We are exactly just one week away from the GlobalProtect: Secure and Seamless Remote Workforce Deployment event! The LIVEcommunity team is ecstatic to be able to bring our customers and experts together to have valuable discussions about adoption, deployment, and more.   Join us at the event to exchange experiences and best practices in securing and enabling a seamless remote workforce experience for GlobalProtect deployments.   In this live event, we’ll cover: Overview, benefits, and security of cookie-based authentication to ensure a seamless and secure end-user experience while accessing applications Identification, quarantine, and reporting of compromised devices to prevent spreading of attacks within enterprise environment  You’ll get a chance to hear from  Nehal Naik (@nnaik) and Varun Ramesh Athrey (@vathreya),  both of whom are GlobalProtect experts with many years of experience in cybersecurity. Don’t miss this informational event and opportunity to ask all your #GlobalProtect questions.   Register now:  GlobalProtect: Secure and Seamless Remote Workforce Deployment .   We look forward to seeing you there! ... View more

  In this week's Security Speakeasy discussion, Minakshi Sehgal, Sr. Product Marketing Manager for Palo Alto Networks, sat down with  Dr. May Wang to discuss the importance of Machine Learning (ML) in discovering and securing IoT devices.   Dr. Wang, co-founder and a visionary of former Zingbox—which became a part of Palo Alto Networks in late 2019 and was rebranded as our IoT Security solution—is a leading expert on ML and its future in cybersecurity. In 2021, fingerprints and signature-based securities are not enough to mitigate risk.  From scalability to self-protection, Dr. Wang drives home the importance of ML-based and Cloud-based security solutions.   "Machine Learning can automatically build models and know what [IoT] normal behaviors should be, and can easily catch their abnormal behaviors. Machine Learning is also easier than human beings in terms of scaling-up ... That's why, from our years of R&D and years of real-world deployment to protect tens of millions of devices, we see that Machine Learning provides a very effective solution to securing all IoT devices." —Dr. May Wang   Learn more by watching the video below. Can't get enough? Check Palo Alto Networks' Comprehensive IoT Security solution and read Unit 42's latest IoT threat report!       The   Security Speakeasy YouTube Playlist is updated every Monday at noon PDT.    Want to learn more? Read our LIVEcommunity blog announcing the   Security Speakeasy series.     Thanks for joining us!  ... View more

  This week, Mohit Bhasin, a product marketing manager for Palo Alto Networks, sat down with systems engineer Chris Motley to talk about the importance of centralized management of network security.   Through 2025, policy misconfigurations—not firewall flaws—will remain the cause of 99% of firewall breaches and bypasses. A Network Security Management solution plays a critical role in helping organizations increase efficiency by managing security with a single pane of glass.   It's no surprise that engineers juggling the tasks of securing multiple firewalls are prone to burnout. A single, centralized solution can consolidate serial changes; instead of writing and rewriting dozens of security configurations, IT teams can activate a single network security solution. It eases the burden of network security—and saves your team time and money.   "Centralized reporting means I don't have to go to 17 devices and look for those reports—it means that I can configure one report that goes across my entire organization." —Chris Motley   Learn more by watching the video below, and read about centralized network security management and our solution, Panorama,  after you're done.       The   Security Speakeasy YouTube Playlist is updated every Monday at noon PDT.    Want to learn more? Read our LIVEcommunity blog announcing the   Security Speakeasy series.     Thanks for joining us!  ... View more

  Have you always wanted to know more about how LIVEcommunity works, chat with behind-the-scenes community team members, or ask a non-technical question about LIVE?  Now’s your chance! That's right, we're hosting our third-ever AMA—except this time, you get to ask us—the LIVEcommunity team members—anything.   We're genuinely excited to invite you to the Ask Me Anything Community Roundtable discussion. There is no set topic; instead, it’s an open stage for LIVEcommunity members, customers, and even Palo Alto Networks employees to learn more about how LIVEcommunity functions and the team that makes it possible.    The floor is open to questions now, and will be open until Thursday, June 24. We will be answering questions Wednesday, June 23 through Thursday, June 24; please bookmark the discussion and join us LIVE as we answer your queries in real time then. We appreciate all of our LIVEcommunity members and are excited to have the opportunity to connect with you!    Not sure what to ask? Here are some prompts to jog your curiosity: I am new to LIVEcommunity. Where should I start? I have some suggestions about LIVEcommunity. Where do I submit my ideas? I need help with a specific Palo Alto Networks product. What are the actions I should take? I had a question and the community answered it! How do I mark it as a solution? How do I know who are experts in LIVEcommunity?   Event Details   The LIVEcommunity Roundtable discussion is open now.  This is your opportunity to ask the LIVEcommunity team any questions you have. We appreciate all of our LIVEcommunity members and are excited to have the opportunity to connect with you!   Who You're Asking — Meet the LIVEcommunity Team Members:   Team Members Username Title Veronica Jowers @vjowers Manager of Community Alejandra Galindo @agalindo  Programs and Social Media Specialist Jenna Qualls @jennaqualls Content Management Specialist Cheryl Rasmussen @crasmussen  Engagement Program Manager Jerilyn Forsythe @jforsythe Senior Digital Editor Iryna Charkashyna @icharkashy  Manager, Front End Development Kim Wens @kiwi Senior Solutions Engineer Joe Delio @jdelio Senior Solutions Engineer Vanitha Cotton @vcotton Community Platform Manager   See you there! ... View more

  It’s an exciting and challenging time to be in network security. There's enough discussion fodder to keep us in our proverbial barstools way past closing time, which is why Palo Alto Networks recently launched   Security Speakeasy. The series invites experts to discuss top-of-mind cybersecurity topics, issues, and trends in short, bite-sized videos.   Yesterday, Neha Kumar sat down with Brian Levin, a product line manager for Palo Alto Networks to discuss the unprecedented shift towards working from home—and how this mobility creates new challenges   and   solutions to authentication and identity for the workforce. You can watch the short, informative video, "Security Speakeasy: Simplifying Zero Trust for User-Based Security," now.   "It's becoming more and more important to have a consistent security  experience, regardless of what applications you're using and in what location." — Brian Levin   Check out the video to learn more about this new set of challenges, designing a Next-Gen Cloud Identity Engine   to achieve Zero Trust, and more.      The   Security Speakeasy YouTube Playlist is updated every Monday at noon PDT.    Want to learn more? Read our LIVEcommunity blog announcing the   Security Speakeasy series.     Thanks for joining us!  ... View more

  Have you always wanted to know more about how LIVEcommunity works, chat with community team members, or ask a non-technical question about LIVE?  Now’s your chance!    The LIVEcommunity team is excited to invite you to participate in our Ask Me Anything Community Roundtable discussion (happening now!). There is no set topic; instead, it’s an open stage for LIVEcommunity members, customers, and even Palo Alto Networks employees to learn more about how LIVEcommunity functions and the team members who make it possible.    The team will answer questions Wednesday, June 23 and Thursday, June 24; please bookmark the discussion page so you can return to connect with the LIVEcommunity team in real time! We appreciate all of our LIVEcommunity members and are excited to have the opportunity to connect with you.    Event Details: The discussion is open now and will close on Thursday, June 24. (CLOSED)   Meet the LIVEcommunity Team Members Veronica Jowers Manager of Community   Alejandra Galindo Programs and Social Media Specialist   Jenna Qualls Content Management Specialist   Cheryl Rasmussen Engagement Program Manager   Jerilyn Forsythe Senior Digital Editor   Iryna Charkashyna  Manager, Front End Development   Kim Wens Senior Solutions Engineer   Joe Delio Senior Solutions Engineer   Vanitha Cotton Community Platform Manager   See you there! ... View more

  How do we create a secure and seamless end-user experience for GlobalProtect deployments? Learn best practices during this interactive event, happening Tuesday, July 6 at 8 a.m. PDT.    Register now for GlobalProtect: Secure and Seamless Remote Workforce Deployment.   In this live event, we’ll cover: Overview, benefits, and security of cookie based authentication to ensure a seamless and secure end-user experience while accessing applications Identification, quarantine and reporting of compromised devices to prevent spreading of attacks within enterprise environment    Join featured experts Nehal Naik (@nnaik) and Varun Ramesh Athrey (@vathreya) to exchange experiences, as well as best practices in securing and enabling a seamless remote workforce experience for GlobalProtect deployments.   See you there!   Like this post if you plan on attending and be sure to visit the GlobalProtect event page for more details! And, if you have a suggestion for a future LIVE event, please let us know in the comments!   ... View more

Recording Now Available !   How do we create a secure and seamless end-user experience for GlobalProtect deployments? Learn best practices during this interactive event, happening Tuesday, July 6 at 8 a.m. PDT.    In this live event, we’ll cover: Overview, benefits, and security of cookie based authentication to ensure a seamless and secure end-user experience while accessing applications Identification, quarantine and reporting of compromised devices to prevent spreading of attacks within enterprise environment    Join us to exchange experiences, as well as best practices in securing and enabling a seamless remote workforce experience for GlobalProtect deployments. Featured Experts:   Nehal Naik—@nnaik  Nehal Naik is a Product Manager responsible for GlobalProtect at Palo Alto Networks. Nehal has a diverse background, with more than 10 years of experience spanning product management, technical marketing, engineering and services in network and security technologies in companies such as Cisco and Rackspace. Nehal holds a master’s in Security Engineering and is an active CISSP.           Varun Ramesh Athreya—@vathreya  Varun Ramesh Athreya is a Product Manager in the GlobalProtect team. He has more than five years experience in Product Management, and has worked on OS, Mobile, and Web App products in different stages of the product lifecycle. He has previously been a PM for Identity, Platform Security, Integrations, and User Experience domains.              (A recording of the event will be available after the event has concluded.) ... View more