About jdprovine

@OtakarKlier  It happens at the exact same time everyday, I am going to check out a pc and see if there is some kind of connection, I don't have any  updates configured for that time. I did unplug the pc I thought might be related but the dataplane CPU did not drop immediately and it lasts less that a minute anyway. I didn't know if the session is already established if that is what the unplugging the pc after it started had no affect. I checked the pc and it had no mapped drives. Not sure where else to look ... View more

@OtakarKlier We do not have an exchange server and we use office 365 which is hosted at our main office and we have not control over it. Our domain controllers are read only as well as our DNS also all references out main office DC's and DNS. So how does this work to match up IP addresses to user names? ... View more

@OtakarKlier  the microsoft radius server we are using does have to reference the DC for the users information.  ... View more

Hey I know this guy LOL I bug him almost daily ... View more

@asangra  I will read the article but right off the top of your head is layer 2 tunnel a more direct connection than layer 3 ... View more

@BPry So what is your opinion about using a bidirectional nat on the application to print rule to allow access for the scan to the file folder which I guess I would have to add the file server too. I don't like it but my boss asked me to look at it so their aren't so many rules that need to be added What are the pros and cons of using a bidirectional nat and combining these two rules, won't it keep the the application to printer  when the scan to network folder is being used?  Is a bidirectional nat rule less secure?  The scan to network would then have access to servers it doesn't even scan too as well as the app to printer would have access to a file server it never uses. Anyway looking for the best way to do these two function both in security, number or rules needed. ... View more

@BPry  Okay I went ahead and created the second nat rule and everything seems to be working just fine. The only thing I am considering if there is a benefit to creating a separate security rule since it is already using one that is on the firewall ... View more

@BPry  So if they try to do both the printing from the application and the scan to print at the same time they will both work?  ... View more

@slick  I am trying to allow a printer on our network scan to a file server folder on an external network, which is easy I can create a nat rule that allows this with no problem. The issue is that a print server on that same remote server has a nat rule to allow a application from their remote network to print the same printer on our local network.. This all occurs across a IPSec tunnel on the PA and the source and destination are natted IP's. Its a direction issue the scan to network goes from trust to VPN and the print server to internal printer goes the other way VPN to untrust. One printer tow functions only works with two nat rules and it not on schedule this solution needs to be applied to over 50 different printers ... View more

@OtakarKlier Yes I always thought they should include a base package of licenses for mobile devices, but for some reason they do not. In general I think licensing based on a percent of the cost of your PA is weird and the fact that you have to pay for everything extra is a croc too. Too bad I like my PA so well ... View more

@BPry Yes it does have a openvpn but I do not see anyway to configure it to connect to our pa vpn using it instead of the GP client, they will just have to connect to the internet with the mifi and use the GP client on their pc and then connect using the VPN     ... View more