Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About cyfpoladmin
About cyfpoladmin
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
01-13-2016
04:29 AM
Me by help you?
https://live.paloaltonetworks.com/t5/Management-Articles/Using-More-than-Four-LDAP-Servers-in-a-Palo-Alto-Networks/ta-p/55125
Do not use IP, use FQDN name domain it works.
... View more
01-11-2016
06:03 AM
2 Kudos
I think this feature is currently available in PAN 7.0. Check this https://www.paloaltonetworks.com/documentation/70/pan-os/newfeaturesguide/globalprotect-features/static-ip-address-allocation.html
... View more
02-05-2015
01:54 AM
Correct answer is show running security-policy | match {\|destination{\|10.3.83.13
... View more
10-18-2013
05:09 AM
Thank you But you know it is workaround because rule exist in configuration but it is not now used. I see nothing.
... View more
10-18-2013
02:08 AM
I have about 400 rules which use domain group. domaing group match to security rules. Example RED { from zone-lan; source any; source-region none; to zone-dmz ; destination 192.168.83.105; destination-region none; user cn=red,ou=paloalto,dc=paloalto.org; category any; application/service any/tcp/any/3000; action allow; terminal yes; It work's.
... View more
10-18-2013
01:20 AM
Yes i know it's working if use dc\nameuser. Please use domain group Active Directory example: user cn=net_server ,ou=paloalto,dc=paloalto.org
... View more
10-18-2013
12:44 AM
it doesn't work if your security rule contain field "user" example: user cn=net_server ,ou=paloalto,dc=paloalto.org
... View more
10-16-2013
11:14 AM
I have one question to engineers Paloalto, why from CLI can't find security rules which include example IP address. What is to difficult create that function? Why such an advanced device does not have such a simple search. Another thing lack this function in CLI is big problem because i must used GUI. What for is CLI?
... View more
10-02-2013
08:18 AM
Thank you for answer I tested you cannot find IP address example: 1. test security-policy-match - Does Not work if your policy rule have source-user, can't find policy which ip is used. 2. admin@PA-200>set cli config-output-format set - It is almost OK if you can use | match IP_ADDRESS 3. GUI and txt file no comments I have two solution: - juniper: root@router# show interfaces | display set | match 47 set interfaces ge-0/0/47 ether-options 802.3ad ae0 set interfaces ge-1/0/47 ether-options 802.3ad ae0 - If i can used pipe ( | ) in exe mode
... View more
05-28-2013
11:40 AM
1 Kudo
Hello I have 400 security rules, how can i find security rule using CLI? I know only IP address.
... View more
02-25-2013
12:28 AM
Thank you for help but still not work. If my policy I use argument source-user I can't find any policy but if source-user is empty I can find. I tested and dosen't work test security-policy-match source 0.0.0.0 destination 192.168.81.81 protocol 6 destination-port 80. test security-policy-match source 0.0.0.0 destination 192.168.81.81 protocol 6 destination-port 80 source-user domain\kdaniszewski test security-policy-match source 0.0.0.0 destination 192.168.81.81 protocol 6 destination-port 80 source-user domain\net_vip-test test security-policy-match source 0.0.0.0 destination 192.168.81.81 protocol 6 destination-port 80 source-user domain\vip-test If I use protocol IP (4) no change dosen't work. Thank you
... View more
02-22-2013
03:58 AM
sorry does not work Are you sure that syntax is correct. I think you must use protocol and source adress. If i use "source user ?" answer is <value> Source User Please tell me correct syntax argument soure-user if my login is kdaniszewski
... View more
02-22-2013
02:08 AM
1 Kudo
Hi Somebody help me write command test security-policy-match....... which WORKS and search that rule: VIP-TEST { from zone-v586; source any; source-region any; to zone-v8; destination 192.168.81.81; destination-region any; user cn=net_vip-test,ou=paloalto,dc=domena; category any; application/service[ ssl/tcp/any/443 web-browsing/tcp/any/80 ]; action allow; Thank you.
... View more
02-10-2016
13Posts
4Likes
1Solution
Feb 10, 2016Last Visited
User
Activity
User
Profile
Latest posts by cyfpoladmin
| Subject | Views | Posted |
|---|---|---|
| 926 | 01-13-2016 04:29 AM | |
| 995 | 01-11-2016 06:03 AM | |
| 673 | 02-05-2015 01:54 AM | |
| 217 | 10-18-2013 05:09 AM | |
| 443 | 10-18-2013 02:08 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 | 01-11-2016 06:03 AM | |
| 1 | 05-28-2013 11:40 AM | |
| 1 | 02-22-2013 02:08 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 |
User Badges
Public Statistics
| Date Registered | 09-30-2011 12:17 AM |
| Date Last Visited | 02-10-2016 09:44 PM |
| Total Messages Posted | 13 |
| Total Likes Received | 4 |
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
