This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About DennyChanditya
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About DennyChanditya
07-01-2022
10Posts
0Likes
1Solution
Jul 01, 2022Last Visited
User
Activity
User
Profile
Latest posts by DennyChanditya
| Subject | Views | Posted |
|---|---|---|
| 59 | 06-29-2022 07:09 PM | |
| 120 | 06-29-2022 01:56 AM | |
| 557 | 06-12-2022 07:54 PM | |
| 1284 | 05-20-2022 08:48 AM | |
| 1173 | 05-20-2022 08:26 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 3 Likes |
User Badges
Community Statistics
| Member Since | 07-15-2021 08:14 PM |
| Date Last Visited | 07-01-2022 03:02 AM |
| Posts | 10 |
06-29-2022
07:09 PM
Hello, i think the link that i post only can be seen on partner account, our management traffic in originate from the same IP public, but in jumpcloud settings, it just one IP Configuration. As the tutorial said in that post that fill the ACS with management interface. So i think to create 2 profil SSO in jumpcloud, but if i create 2 profile in jumpcloud, back to Palo it only have one saml profile on authentication profile. then i think to change the service routes for SAML, but i cant find the saml settings on the service route. Is that possible to change the SAML service route? so i can use the public interface and setup in JC using IP Public.
... View more
06-29-2022
01:56 AM
Hi, i follow the docs here LIVEcommunity - PAN-OS SAML SSO with JumpCloud and Mobile Push MFA - LIVEcommunity - 493684 (paloaltonetworks.com) it works well with one firewall. When it used to HA active Passive Environtment, it wont work on the passive, the config sync from the active, but the configuration from Jumpcloud only setup for 1 IP Only. is anyone here used Jumpcloud as the SAML for device login authentication? Is there other tips to work on saml auth on HA environtment? still trying on Radius Jumpcloud too, but i still stuck in the certificate.
... View more
06-12-2022
07:54 PM
For first deployment we was setting to ECMP because they want to utilize all the WAN Links, after few weeks our user had a problem with routing,so we check the routing and see if any problem but we don't find that. So we use the NAT and PBF to specify some segment to specific WAN link, and let the other segment use the ECMP Configuration. I Check another threat in palo/others vendors, i think this is the behaviour the ECMP configuration, balancing the traffic, even we specify the link and when the link is higher than the other, the configuration is balancing the link.
... View more
05-20-2022
08:48 AM
Hello, i have question about PBF Using ECMP. We have 3 ISP and using ECMP Setting with weight round robin and Symetric Return Settings ISP A > 200 ISP B > 100 ISP C > 50 NAT we set like this All User > ISP A Using PBF for some IP Segment Segment A to ISP A Segment B to ISP B Segment C to ISP C But we have some problem link below : When we check the traffic monitor, we can see that IP Segment A is still Going to ISP B and ISP C When we disable ECMP, setting the ISP metric in virtual routing to 10,20,30, the Globalprotect only up for ISP that have a low metric. For some reason, some users can't access/maybe have a slower access to specific website. Security policy for now we set to Allow All. Is there any solution to avoid IP Segment A going to ISP B and C using this ECMP Method?
... View more
05-17-2022
02:59 AM
Hello, i have palo alto with 2 ISP(A and B) and 1 internal connection i enabled the ECMP + simetric return and ecmp setting IP Modulo. my goal is, force 1 IP segment to ISP B to go to the internet i already setting in PBF, using enforce return simetric but in the the traffic monitor, the user show incomplete application. i assume that it go into ISP B and dont go back to ISP B. Is there any solution to solve this.
... View more
04-24-2022
05:17 PM
Solved, The device can't retrieve license from the internet, so after i deactivate that, i cant upload again to the device. I do the private-data-reset command and then i can upload manually the license again.
... View more
04-22-2022
12:27 AM
Hello we have PAN that license uploaded manually before, because a network issue that we cant get the dynamic update/retrive the license. we think that the license problem, so we want to remove the license and then add again to the firewall. but we choose the deactivate, not the Delete command from CLI. after that, we want to upload manually, but it says invalid license. is there any solution so we can put the license manually again? is reset the device will solve this issue?
... View more
03-14-2022
03:23 AM
Hello, our user using PA850 and PAN 10.1.3 and they want to generate PDF Report for 30 Days. They was config the Managed Report PDF last week, and when they came to Reports, the report is empty. FYI, the device is deploy about 2-3 week ago, should i wait to 1 month for the report create automaticly? The reports can download PDF but only 1 day,but not 1 month or is there any missing configuration? Im try to using Custom Reports but the output is different from PDF in the Reports menu/
... View more
02-23-2022
06:42 PM
Hello, i want to ask something about globalprotect i've configure the GP, and i test the GP to access the internal without problem. and after few hours, that i was called by the user and they told me, the users that work from home, they cannot access the internet without globalprotect connected. (user are not in office network) or now i tell the user to uninstall the GP and still wait for they feedback, but to troubleshoot this, is there any misconfiguration with the GP? thanks
... View more
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks