This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
About Ben-Price
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About Ben-Price
04-28-2022
113Posts
28Likes
8Solutions
Apr 28, 2022Last Visited
User
Activity
User
Profile
Latest posts by Ben-Price
| Subject | Views | Posted |
|---|---|---|
| 2163 | 04-27-2022 04:16 PM | |
| 2239 | 04-19-2022 05:46 PM | |
| 2438 | 04-18-2022 11:56 PM | |
| 5347 | 04-12-2022 11:31 PM | |
| 1820 | 04-12-2022 10:50 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 04-19-2022 05:46 PM | |
| 4 Likes | 04-12-2022 11:31 PM | |
| 1 Like | 04-04-2022 05:14 PM | |
| 3 Likes | 02-21-2022 02:15 PM | |
| 1 Like | 01-09-2022 04:54 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 05-16-2021 06:01 PM |
| Date Last Visited | 04-28-2022 09:28 PM |
| Posts | 113 |
| Total Likes Received | 28 |
04-27-2022
04:16 PM
@kiwi @vsys_remo Have you experienced the issue with the contextual help menu in the GUI not loading correctly in PAN OS 10.1.5-h1?
... View more
04-19-2022
05:46 PM
1 Kudo
Thanks @kiwi @KurtHinson using Firefox or increasing Chrome to 110% fixed the tag field for me. Does anyone experience the contextual help page not loading correctly in PAN OS 10.1.5-h1 (see below)? I have tested in Chrome, Edge and Firefox and issue persists. When you click the click the below button: Help page opens in a new browser windows but then never loads and the URL, just seems to jump around:
... View more
04-18-2022
11:56 PM
Hi All, I seem to have run into some minor UI bugs in PAN OS 10.1.5-h1: 1. When you open a security policy rule, the tags section is squashed and you cant re-size it or click the drop down (see below) 2. When you click on the contextual help in the Web GUI, the help webpage that usually loads just seems to go into to some sort of loop and never fully loads unable. I have tested on 450 and 850, has anyone run into theses issues.
... View more
04-12-2022
11:31 PM
4 Kudos
@Kaj.Lehtinen I re-imported the whole rule base. Didn't have to re-name anything. I followed the below process: 1. Take a backup of the current configuration 2. Export current config XML 3. Open in a text editor and find all rules with incorrect hip-profile XML tags, delete hip-profile XML tags as pictured below <hip-profiles> <member>any</member> </hip-profiles> 4. Save the XML config file, re-import to the firewall and try to commit.
... View more
04-12-2022
10:50 PM
@Kaj.Lehtinen Thanks for the update. I just tried this 5 minutes ago and can confirm removing the below from the firewall config XML fixed the issue. <hip-profiles> <member>any</member> </hip-profiles>
... View more
04-12-2022
05:24 PM
@Kaj.Lehtinen So I need to add the below XML to each rule or remove? <hip-profiles> <member>any</member> </hip-profiles> <action>deny</action> <log-setting>Log Forwarding Profile</log-setting> <tag> <member>Inbound</member> </tag> <source-hip> <member>any</member> </source-hip> <destination-hip> <member>any</member> </destination-hip> </entry> Pre and post upgrade XML files look to the same, as far as I can see.
... View more
04-11-2022
07:12 PM
@Kaj.Lehtinen @BPry @slick I am seeing the same issue after upgrading to 10.1.5-h1 on 4 firewalls. XML looks to OK. Nothing suspicious when examining the pre and post upgrade XML files. Tried everything above and still doesn't commit.
... View more
04-11-2022
04:24 PM
@BPry @OtakarKlier @kiwi Thanks for your feedback here. I will clarify with the customer exactly which scan they are planning on using.
... View more
04-10-2022
04:39 PM
@BPry @kiwi @SteveCantwell Has anyone had any experience with this?
... View more
04-06-2022
10:03 PM
Hi All,
Are Tenable vulnerability scans (see below) on Palo Alto firewalls / Panorama resource intensive for the PA devices? Does this cause high DP or MP issues?
https://community.tenable.com/s/article/How-to-perform-a-compliance-scan-on-a-Palo-Alto-Firewall
Thanks in advance.
... View more
04-05-2022
05:53 PM
@BPry OK so what I am seeing in my lab seems to be correct, as per the below: If the tunnel rename timeout timer expires during the login process, the pre-logon tunnel is terminated and I then need to manually connect via the GP agent. If the tunnel rename timeout timer does not expire during the login process, pre-logon tunnel is just renamed to the logged in user and the VPN connection stays connected. Is that correct? The logs show the tunnel disconnecting due to the grace period expiring (see below). (P5124-T11096)Debug(11056): 03/31/22 12:37:37:469 CPanMSService::Disconnect(): reason is Grace period expires, do not set network discover event for on-demand mode. (P5124-T11096)Debug(7068): 03/31/22 12:37:37:469 --Set state to Disconnected (P5124-T11096)Dump (1020): 03/31/22 12:37:37:469 status is Disconnected Client is saying that even though it disconnects here, they can not just go to the agent and click connect. They need to navigate to the hamburger menu and select refresh connection first and then click connect. I am not experiencing this issue in the lab.
... View more
04-04-2022
05:22 PM
Hi All, I have a question regarding Pre-Logon and then on demand. A client has reported they have setup pre-logon tunnel rename timeout to 90 secs. After the client logs in, the GP client goes into a disconnecting state and never times out. Client has to select refresh connection to resolve the issue, and then login manually. I have tested in our lab and get the below results: When the pre-tunnel timeout is set to 90 seconds in our lab the tunnel stays connected through client login, is then renamed to user mode and stays connected, no manual login required. If I change the tunnel timeout to a value between 0 - 20 secs, the pre-logon tunnel is terminated as the user logs in and then the user has to login to GP manually. I'm testing with: PAN OS 9.1.11-h3 as 9.1.11 is not longer available. GP 5.2.11-10 Client testing with: PAN OS 9.1.11 GP 5.2.11-10 What is the expected behavior here? My understanding is that if I set a value between 0 - 600 secs for the pre-logon tunnel timeout, the pre logon tunnel will stay connected for that time, and once that time expires the tunnel is terminated and the client needs to login manually. Any insight would be greatly appreciated. @BPry
... View more
04-04-2022
05:14 PM
1 Kudo
Deleted the wildcard certificate and re-imported and that has fixed the issue.
... View more
03-23-2022
11:29 PM
Hi All, Can the integrated User-ID agent of an on-prem firewall monitor Azure AD for user-to-IP address mapping information? Many thanks
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
04-28-2022
09:28 PM
|
Latest Tags
No tags yet
Likes From
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks