This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About AndyC_234
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About AndyC_234
7Posts
0Likes
0Solutions
Last Visited
User
Activity
User
Profile
Latest posts by AndyC_234
| Subject | Views | Posted |
|---|---|---|
| 2196 | 03-31-2020 12:29 AM | |
| 39363 | 03-15-2018 08:21 AM | |
| 4345 | 03-15-2018 04:15 AM | |
| 1812 | 03-15-2018 01:31 AM | |
| 39504 | 03-15-2018 01:23 AM |
User Badges
Community Statistics
| Member Since | 03-27-2015 03:35 AM |
| Date Last Visited | |
| Posts | 7 |
03-31-2020
12:29 AM
so the json looks like this:
{"ip":["104.129.193.65","104.129.195.65","104.129.197.65","104.129.193.103","104.129.195.103","104.129.197.103"]}
this is my prototype
age_out: default: null interval: 257 sudden_death: true attributes: confidence: 100 share_level: green type: IPv4 extractor: ip indicator: null prefix: zs source_name: zscaler url: https://ips.zscaler.net/pac/json
but it's showing 0 indicators... any thoughts?
... View more
03-15-2018
08:21 AM
I would enable the debugger on the client, and see why it's not accepting your cerftificate, it will tell you exactly what is wrong. If you right click on your client, you can choose "Collect Logs", open that zipfile and open PanGPS.log. Look for anything related to SSL: (T21656) 03/12/18 15:19:20:667 Debug( 322): Open_SSL_connection: subject '/C=US/ST=West Virginia/L=Charleston/O=xxxxxxxxx (US) Inc./OU=IS/CN=*.xxxxxxx.com'
(T21656) 03/12/18 15:19:20:667 Debug( 326): Open_SSL_connection: issuer '/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA'
(T21656) 03/12/18 15:19:20:667 Debug(1006): Name vpn.xxxxxxxxx.com matches pattern *.xxxxxxx.com
(T21656) 03/12/18 15:19:20:667 Debug( 923): Cert name check of *.xxxxxxx.com succeeded
... View more
03-15-2018
04:15 AM
1) Uninstall the client: Clean out the registry and Program directories: Start -> run -> regedit. Remove the following key - HKEY_CURRENT_USER\Software\Palo Alto Networks Remove the following key - HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks Delete the following folder/directory - C:\Program Files\Palo Alto Networks Run the following command as an administrator from the windows cmd line: sc delete PanGPS 2) Reboot 3) Download and install / test again.
... View more
03-15-2018
01:31 AM
You could have run 8.0.8 and still use GP 4.1, it's not necessary to run 8.1 for GP 4.1, it's backwards compatible up to PAN-OS 7.1 I don't think it's recommended yet to run 8.1 in production, new releases always tend to have a few issues. The same goes for GP 4.1... it looks nice, and I'm sure it will be a great client, but it's not just there yet... wait until GP 4.1.2... I would downgrade the firewall to 8.0.8, and use GP client 4.0.7 for now, despite the interface looks dated, it does not have the problems you describe and it's very stable.
... View more
03-15-2018
01:23 AM
If you have a certificate on your IP; instead of your hostname; you need to change the external gateway FQDN name to the IP and not use fw.relianet.be So change this: gateways {external {list {fw.relianet.be {fqdn fw.relianet.be;priority-rule {Any {priority 1;}} To this: gateways {external {list {fw.relianet.be {fqdn <your IP address>;priority-rule {Any {priority 1;}} A-
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks