About Wbm

Me by help you? https://live.paloaltonetworks.com/t5/Management-Articles/Using-More-than-Four-LDAP-Servers-in-a-Palo-Alto-Networks/ta-p/55125   Do not use IP, use FQDN name domain it works. ... View more

I think this feature is currently available in PAN 7.0. Check this https://www.paloaltonetworks.com/documentation/70/pan-os/newfeaturesguide/globalprotect-features/static-ip-address-allocation.html ... View more

Thank you But you know it is workaround because rule exist in configuration but it is not now used. I see nothing. ... View more

I have about 400 rules which use domain group. domaing group match to security rules. Example RED {         from zone-lan;         source any;         source-region none;         to zone-dmz ;         destination 192.168.83.105;         destination-region none;         user cn=red,ou=paloalto,dc=paloalto.org;         category any;         application/service  any/tcp/any/3000;         action allow;         terminal yes; It work's. ... View more

Yes i know it's working if use dc\nameuser. Please use domain group Active Directory example: user cn=net_server ,ou=paloalto,dc=paloalto.org ... View more

it doesn't work if your security rule contain field "user" example: user cn=net_server ,ou=paloalto,dc=paloalto.org ... View more

Thank you for answer I tested you cannot find IP address example: 1. test security-policy-match - Does Not work if your policy rule have source-user, can't find policy which ip is used. 2. admin@PA-200>set cli config-output-format set - It is almost OK if you can use | match IP_ADDRESS 3.  GUI and txt file  no comments I have two solution: - juniper: root@router# show interfaces | display set | match 47                             set interfaces ge-0/0/47 ether-options 802.3ad ae0                              set interfaces ge-1/0/47 ether-options 802.3ad ae0 - If i can used pipe ( | ) in exe mode ... View more

Thank you for help but still not work. If my policy I use argument source-user I can't find any policy but if source-user is empty I can find. I tested and dosen't work test security-policy-match source 0.0.0.0  destination 192.168.81.81 protocol 6 destination-port 80. test security-policy-match source 0.0.0.0  destination 192.168.81.81 protocol 6 destination-port 80 source-user domain\kdaniszewski test security-policy-match source 0.0.0.0  destination 192.168.81.81 protocol 6 destination-port 80 source-user domain\net_vip-test test security-policy-match source 0.0.0.0  destination 192.168.81.81 protocol 6 destination-port 80 source-user domain\vip-test If I use protocol IP (4) no change dosen't work. Thank you ... View more

sorry does not work Are  you sure that syntax is correct.  I think you must use protocol and source adress. If i use "source user ?" answer is <value>  Source User Please tell me correct syntax argument soure-user if my login is kdaniszewski ... View more