This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About FarhanKoujalgi
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About FarhanKoujalgi
12-09-2021
54Posts
1Like
2Solutions
Dec 09, 2021Last Visited
User
Activity
User
Profile
Latest posts by FarhanKoujalgi
| Subject | Views | Posted |
|---|---|---|
| 1607 | 12-01-2021 09:49 AM | |
| 1295 | 11-24-2021 08:28 AM | |
| 1144 | 11-24-2021 08:20 AM | |
| 3710 | 10-13-2021 10:12 AM | |
| 4369 | 10-12-2021 11:29 PM | |
| 4530 | 10-12-2021 04:31 AM | |
| 6223 | 10-06-2021 07:11 AM | |
| 6281 | 10-04-2021 11:39 AM | |
| 1311 | 10-01-2021 08:52 AM | |
| 6514 | 10-01-2021 08:50 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 08-18-2021 04:34 AM |
User Badges
Community Statistics
| Member Since | 05-13-2021 08:20 AM |
| Date Last Visited | 12-09-2021 04:39 AM |
| Posts | 54 |
| Total Likes Received | 1 |
12-01-2021
09:49 AM
Hey guys hope you doing well One of my customer have an issue to fetch PANOS version. PA-220 Current version 10.0.0 The dynamic updates are not up to date as i see the latest dynamic updates installed on her firewall are month of april 2021. Also i am not able to fetch the latest PANOS. I checked the service route and policy for PANOS upgrade. Also check the internet through CLI by pinging Also the device certificate also not able to fetch in his firewall. I attach the image of device cert pls help me Threat,support and wildfire license are valid.
... View more
11-24-2021
08:28 AM
there are two location site a and b in which i created a ipsec tunnel between them its up. As i ping there LAN IP i am able to ping. there LAN network Site A LAN network is 192.168.4.x/24 Site B LAN network is 192.168.x.1/24. I am able to ping both the interfaces by cli and also check logs that are going through a tunnel. But the issue there are IPs based on the telephone on both site. The site A person is able to call site B telephone and the voice communication is ok. But the Site B person was not able to call the site A location is shows failed. I checked the logs both are going through tunnel and byte was received and sent. The site B person able to call on another location vice versa. I also checked the metric for both the palo alto firewall is okay Nee some help
... View more
11-24-2021
08:20 AM
Want to create IPSec tunnel between two Palo alto site A and site B. Both site A and Site B has dynamic IP configure WAN interface. Site A wan is coming through a router and i know the public IP which is connected to router and comes to firewall. Site B wan configure as dynamic DHCP client on interface . So its is possible to connect IPsec between two dynamic IP configure as a WAN on the Palo alto.
... View more
10-13-2021
10:12 AM
@LAYER_8 Thankyou for reply So I have to create a different URL filtering for that ? I attached the images plz help me out my config is right or wrong. What should i add into the value and domains? Is the security policy is correct ? And what should I enable in the decryption profile?
... View more
10-12-2021
11:29 PM
@LAYER_8 and @DavidWalters2 Guys thanks for the reply. I not getting your solution please explain in details. @BPry Do you have any idea about this?
... View more
10-12-2021
04:31 AM
Hey guys one of my customer wants to block personal gmail (google mail) for eg : example@gmail.com and want to allow the corporate Gmail eg : example@corporate.com what are the steps to configure this type of request please help us.
... View more
10-06-2021
07:11 AM
Dear @BPry I know that the customer wants the benefit of http2 so when he enable the strip alpn the HTTP2 goes down to http1.1 so he wants the traffic should decrypted with http2 without enable the strip alpn. is there any other method to access that redirect URL without enable strip alpn. There are two methods is see here to access that http2 redirect url 1) Bypass that URL Without decryption. 2) Enable the Strip ALPN and get access. Is there any other method in which my customer is able to access the URL without enabling strip alpn with decryption? @BPry I know after enable strip alpn the traffic is decrypt but the customer want the http2 benefit with decrypted traffic.
... View more
10-04-2021
11:39 AM
@BPry Thanks for the reply as you didn't get my concern, The thing is when I enable decryption I cant able get access to that website URL link the link redirects for example URL:Paloalto/eqd/qdq/jfw09efns/googledrive. and the error display is HTTP2 "ERR_HTTP2_INADEQUATE_TRANSPORT_SECURITY" THIS ONE and when I enable the strip alpn its able to access or disable the decryption ?
... View more
10-01-2021
08:52 AM
one of my customer has 95% root storage if we upgrade the PANOS 9.0.9 H1 to 9.1.11 Is there any impact on the disk usage of root storage?
... View more
10-01-2021
08:50 AM
Dear Team One of my customers wants HTTP2 benefits with decryption enable. The customer don't want to enable the strip ALPN because it Downgrades to HTTP1.1 Can we do decryption with HTTP2 Downgrade with decryption?
... View more
09-27-2021
09:38 AM
Hey guys as we know the above advisory resolve in PANOS 10.0.8 and above so in the solution, Palo alto says they will resolve it in September can I get to know the status of the new firmware or can I download the 10.1.0 but that is not the stable version yet.
... View more
- Tags:
- pan-os
09-26-2021
06:12 AM
Hey @BPry thanks for replying i am also want to know is there any other solution for redirect URL suppose the URL starts like example: https;//paloalto/3e324/3424/reyre23/googledrive Is it possible to Access this kind of URL without enable the strip alpn. and with decryption Enable. The above is just for an example.
... View more
09-24-2021
08:56 AM
Hey guys one of my customer I not able to access the Redirecting URL's This Error display (err_http2_inadequate_transport_security) I checked the logs the traffic URL shows alert but the decryption is done. We are able to Access the URL without decryption. Created a specific decryption policy in which it enables the Strip ALPN. and we are able to access the URL decrypted. The customer wants to send the traffic decrypted. It's safe to enable the Strip ALPN and access the Redirecting URL or It compromises the Network Security. please share the severity if we enable the strip alpn.
... View more
09-24-2021
02:16 AM
Dear @BPry I Checked through ssh show user IP-user-mapping for to particular user The one says the mismatch and the other one says unknown and after some 5 to 10 minutes I run the same IP user mapping cmd the users are shown is this any strange behaviour that sometimes user mapping shows sometimes not I checked the WMI is enable on firewall and in the server monitoring also server are 4 and connected
... View more
09-23-2021
09:31 PM
Its agentlesss where should i change that timeout value. but it is for only one user.
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks