Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About ManillaTechOps
About ManillaTechOps
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
08-18-2015
17Posts
3Likes
2Solutions
Aug 18, 2015Last Visited
User
Activity
User
Profile
Latest posts by ManillaTechOps
| Subject | Views | Posted |
|---|---|---|
| 315 | 01-02-2014 12:41 PM | |
| 315 | 12-11-2013 03:54 PM | |
| 362 | 12-02-2013 12:03 PM | |
| 241 | 11-04-2013 12:00 PM | |
| 304 | 11-01-2013 11:44 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 04-21-2013 12:23 PM | |
| 1 | 04-21-2013 12:43 PM | |
| 1 | 05-01-2013 11:13 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 |
User Badges
Public Statistics
| Date Registered | 08-29-2012 02:23 PM |
| Date Last Visited | 08-18-2015 09:06 AM |
| Total Messages Posted | 17 |
| Total Likes Received | 3 |
01-02-2014
12:41 PM
This is an applipedia issue. BrightCloud (URL2 Filter) has already updated this, via a ticket I submitted directly to them as a PAN OEM customer?! so no need to fix it on that side.
... View more
12-02-2013
12:03 PM
FileSharing site Pando.com has gone bankrupt as of August 31st, 2013. Since then the news aggragation website Pando Daily has taken over the vanity URL pando.com. Since we have a blanket filter for all "FileSharing" categories, our users can not get to the new Pando Daily url, pando.com. Can Palo Alto review this site and remove it from the category of "FileShare" in Appepedia?
... View more
11-01-2013
11:44 AM
Code42's backup product, CrashPlan, is not on the list of vendors within the HIP Objects for Backup software. This is currently the most popular commercial backup software for businesses that use Mac OS X based workstations. * When will support be added? * What can I do to make a check for this until it is supported?
... View more
Labels:
11-01-2013
11:36 AM
What is the min. version of PanOS 5.0.x that supports assigning Mac OS X 10.9.x Maverick as the OS->Contains->Apple->Mac OS X10.9 under Objects->Global Protect->HIP Objects->"Profile Name" in PanOS?
... View more
Labels:
09-06-2013
11:03 AM
Last discussion on this topic was in 2010. Is there any update on DHCP-Relay (IP helper by any other name) binding to GlobalProtect clients?
... View more
Labels:
08-28-2013
12:28 PM
We have GlobalProtect working in a production state. There was a new client released in July. How can I only get the new client downloaded, for testing, BEFORE we allow all production clients to download?
... View more
08-28-2013
09:49 AM
I cannot see a way to download the GlobalProtect client for Mac and Windows, without activating it for the entire environment. I would like to download the latest version to a client for testing before release. How do I do this without activating it for everyone?
... View more
Labels:
08-14-2013
01:08 PM
Please take a tech note to update your documentation for 5.x branch to say the following instead: "The agent will contact all of the gateways and establish a tunnel with the firewall that provides the fastest response and the highest lowest priority value." https:// <firewall>/PAN_help/en/wwhelp/wwhimpl/js/html/wwhelp.htm#href=global_protect.09.3.html#1245781
... View more
08-14-2013
11:01 AM
We are having West Coast clients connect to our "backup" east coast gateway, which is a small sales office, and thus, cannot be "Manual Only". We would like to adjust the gateway priorities to help keep all clients on West Coast connecting to the main gateway setup for those clients. In reading documentation it states, "The agent will contact all of the gateways and establish a tunnel with the firewall that provides the fastest response and the lowest priority value." See https:// <firewall>/PAN_help/en/wwhelp/wwhimpl/js/html/wwhelp.htm#href=global_protect.09.3.html#1245781 There are several "Priority" levels offered in configuration: Manual Only, Highest, High, Medium, Low, Lowest Clarification Request: Do we use "Lowest" for the portal we really want everyone to use, or "Highest"? By the documentation listed above it seems like "Lowest" is correct answer, but "sounds" counter intuitive to natural english language interpretation that "Highest" would be the gateway you would want everyone to connect to. Thank you in advance!
... View more
Labels:
05-01-2013
11:13 AM
1 Kudo
< sarcasm > Since support was awesome and got back to me on this.. < /sarcasm > Subject: GlobalProtect Requests System Keychain Access on Mac OS X Clients Every Time Scenario: User will need to enter in Local Administrator account to allow System keychain access twice during the GlobalProtect VPN Connection Process, when using Machine Certificate authentication. Cause: When using Machine Certificates with GlobalProtect on Mac OS X Clients, the certificate must be accessed from the "System" Keychain in OS X. This will cause a Keychain Access prompt to appear twice when the client attempts to access certificate for verification against to portal and gateway. Workaround: In Keychain Access application, locate the Machine Certificate issued to Mac OS X Client in the System keychain. Right Click on the private key assoicated with Certificate and click Get Info, then click Access Control tab Then click + sign to select an Application to allow Then press key combiniation "<Command> + <Shift> + G" to open Go to Folder Enter "/Applications/GlobalProtect.app/Contents/Resources and click Go Find PanGPS and click, then press Add Save Changes to private key You have now allowed GlobalProtect access to only THIS certificate and private key. It will no longer prompt for keychain access, giving user a seamless no touch experience with GlobalProtect.
... View more
04-25-2013
09:59 AM
We are not using a One Time Password. The portal is requesting the x.509 certificate from the Mac OS X "system" keychain. When it makes this request, the user is prompted to enter a local administrator username and password to allow Global Protect to verify this certificate. Is there a way to have Global Protect ether a) cache the certificate b) "remember" decision to allow access to certificate in keychain.
... View more
04-24-2013
03:24 PM
We have Machine Certificates on our Mac OS X Lion clients. When the portal accesses the system keychain to verify the certificates, it prompts the users twice to allow this action. Is this expected behavior? How do we get it to stop asking for permission to access the machine certificate every time a client connects to portal?
... View more
Labels:
04-21-2013
12:43 PM
1 Kudo
Network -> Global Protect -> Portals -> <profile name> -> Client Config -> <config name> -> Gateways -> External Gateways -> "Address" == <FQDN> && != <IP Address> Translation: Make sure that you use the Fully Qualified Domain Name (FQDN) in Gateway Certificate and NOT the IP address for the gateway in the "Address" field of External Gateways. This is not totally obvious to me as "Address" usually means "IP Address" and "URL" or "FQDN" or "Domain" usually means the domain name of something.
... View more
04-21-2013
12:23 PM
1 Kudo
We are unable to get multiple gateways working correctly with Global Protect. When we have one portal and one gateway, clients are able to successfully connect and establish a VPN tunnel. With two gateways we get the following error from both the originally setup gateway and the gateway we are attempting to add: "Gateway x.x.x.x: Server Certificate Verification Failed" in the Global Protect Client -> Status -> Warnings/Errors dialogue. Setup information: Portal Hardware: PA-2050 Portal OS: 5.0.3 Gateway 1: Same as Portal above Gateway 2 Hardware: PA-200 Gateway 2 OS: 5.0.3 Global Protect Portal License: YES Global Protect Gateway 1 License: YES Global Protect Gateway 2 License: YES Certificate Authority Information: Microsoft Server CA 2012 Portal - CSR issued to MS CA Gateway 1 - CSR issued to MS CA Gateway 2 - CSR issued to MS CA Clients - Machine Certificate pre-installed via GPO from MS CA
... View more
Labels:
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-18-2015
09:06 AM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
