This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
About Sukhmeet
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Sukhmeet
4Posts
0Likes
0Solutions
Last Visited
User
Activity
User
Profile
Latest posts by Sukhmeet
| Subject | Views | Posted |
|---|---|---|
| 405 | 12-01-2022 07:40 PM | |
| 1956 | 02-08-2022 09:16 AM | |
| 1763 | 01-26-2022 08:30 PM | |
| 1862 | 01-23-2022 09:58 PM |
User Badges
Community Statistics
| Member Since | 01-23-2022 09:45 PM |
| Date Last Visited | |
| Posts | 4 |
12-01-2022
07:40 PM
Have to enable User-ID for corporates users. Not able to locate documentation around best practices for user id. for example in my scenario.
we have one domain xyz.com with 50 domain controllers to monitor. we have winRM installed on all the domain controllers. So we will be considering doing agentless user id integration.
my questions are following.
> Can firewall PA 5250 integrate directly with active directory server using LDAP and capable of monitoring 50 domain controllers using winRM?
> Should we consider having user mapping server which will be integrating with AD server using LDAP and firewall will just monitor 2 user mapping servers (primary & secondary)?
> what are the issue that we may experience with any of the setup in operations?
> what are other best alternative we can explore?
... View more
02-08-2022
09:16 AM
Requirement: have to make firewall config based on network configuration done on Nexus. My challenge is Communication is not posoble with network guys coz they are Chinese, customer speak different language as well. OBJECTIVE: we want DC firewalls to be used for filtering or traffic only and nexus to do the core routing.. In the config I can see that VRFs are created and for ebgp peering of core switch with firewall I can see each VRF peer IP is different please see attached screenshot. After seeing this config i decided to make virtual routers for each VRF and do bgp peering between VRF and VR and the reason is decided this is coz each VRD"this all in design phase" My question is.. Is it possible to peer multiple VRFs with single virtual router? And establish ebgp with it? If yes, what changes you think network team should make on core switch or none? Coz my understanding is that since the peer IPs in each VRF is different for the firewall AS.. Palo alto single virtual router won't be able to establish since we need to have unique address on both side for one AS and with single VR it's not possible.. Appreciate if someone can give feedback. Or correct approach.
... View more
01-26-2022
08:30 PM
Thanks Pavel, yeah it make sense. we will have BGP peering with MPLS router (i will check on conditional route advertisement part) however, we do not have BGP peering with ISP and we are using static route with ECMP enabled on 3 ISP links. Can you tell how can it trigger failover on ISP side when both core switches are down? please note both DCs have same ISP with 3 links and we have VLAN configured which is enabled on primary DC and only when the primary DC ISP link fails secondary DCs ISP Vlans will be enabled. Thanks in advance
... View more
01-23-2022
09:58 PM
Hi all, We have active passive setup of firewalls in both DC and DR site. The scenario I am trying to work on is, if my downstream connected core switches are down in primary DC, how can make ISP and MPLS connected devices on my upstream learn that all traffic should be routed to DR site firewalls. Basically, How can we make ISP and MPLS router learn that both core switches are down eventhough the firewalls are UP.?
... View more
Contact Me
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks