This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About kk555
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About kk555
12-16-2015
16Posts
0Likes
0Solutions
Dec 16, 2015Last Visited
User
Activity
User
Profile
Latest posts by kk555
| Subject | Views | Posted |
|---|---|---|
| 1912 | 12-16-2015 01:33 PM | |
| 2153 | 12-01-2014 09:56 AM | |
| 2571 | 09-04-2014 06:13 AM | |
| 2848 | 09-02-2014 12:48 PM | |
| 1470 | 09-02-2014 12:48 PM | |
| 2848 | 09-02-2014 05:53 AM | |
| 3100 | 09-02-2014 05:51 AM | |
| 1700 | 09-02-2014 05:42 AM | |
| 1700 | 08-27-2014 11:26 AM | |
| 4437 | 08-27-2014 08:45 AM |
User Badges
Community Statistics
| Member Since | 05-29-2013 12:11 PM |
| Date Last Visited | 12-16-2015 04:58 PM |
| Posts | 16 |
12-16-2015
01:33 PM
We're trying to push out a newer version of the Global Protect client with the "Prompt" method via the Portal.
The users are promped, but when they click Yes, it never upgrades - ever...we've had clients connected for hours with no success.
The upgrade works fine for our OSX clients but never succeeds with Windows machines.
We're currently on PANOS 6.0.10, with GP Clients on 2.2.1 trying to go to 2.3.2.
Thanks...
... View more
12-01-2014
09:56 AM
I am working with Microsoft MFA for some RADIUS based "cloud" dual factor authentication. MFA recommends a RADIUS timeout of 60 seconds due to the nature of their solution but PAN restricts RADIUS to 30 seconds as a maximum. Is there anyway to bypass this restriction? Thank you.
... View more
Labels:
09-04-2014
06:13 AM
I realize that PBF application based routing is limited to a subset of applications supported. We're specifically looking to use PBF for Outlook-Web-Online and it's not in the list but many other things are, like MS-OCS-* and SMTP, etc... Do we know why some applications are listed and why? Is it possible to make a feature request to support this application? Thoughts? Thanks.
... View more
Labels:
- Labels:
-
App-ID
-
Configuration
-
Management
-
Networking
-
Set Up
09-02-2014
12:48 PM
If the user clicks disconnect, it does not occur. This is only when their login timeout reaches the limit.
... View more
09-02-2014
05:53 AM
Oh yes, I have upgraded to Panorama 5.1.9 hoping that would resolve the problem and it did not. We had the same issue on 5.1.6.
... View more
09-02-2014
05:51 AM
I have a number of reports we use to generate usage information, such as the top 100 applications used over 24 hours sorted by bytes. If I run this report manually with RUN NOW, it generates perfectly and everything is sorted like it should be. If we schedule this report to run automatically and email the results out to a subset of people, the sorting is completely lost and it's just a zillion lines of individual instances of applications. In other words, the sort by Bytes portion of the query is lost and it just turns into each hit. Any ideas on how to fix this? I'm tasked with sending reports to management types and right now I've resorted to doing this manually because of this issue.
... View more
Labels:
- Labels:
-
Configuration
-
Management
-
Set Up
09-02-2014
05:42 AM
Ok, I have two clients on 2.0.4, one windows and one mac. They're both still exhibiting the same problem: once the 24 hour session "times out", they attempt to reconnect and cause a re-authentication instance to occur. So that did not fix the problem.
... View more
08-27-2014
11:26 AM
Ok, I'll turn up 2.4.0 on a few test clients and see if it continues and will watch this thread for further information. Thank you
... View more
08-27-2014
08:45 AM
Hardik, We're on 1.2.10 - OSX and Windows. Experiencing the same issue with both operating systems. We experienced this issue with previous versions as well. Thank you for your help!
... View more
08-27-2014
08:36 AM
We are already configured for On-Demand. The issue is that the user is immediately prompted for re-authentication after the Login Life expires. We don't want them prompted without clicking connect. Is that impossible to prevent?
... View more
08-27-2014
07:44 AM
Hardik, Thank you for your prompt reply but that's not actually the situation: Login Lifetime IS set for 24 hours because we don't want users to stay connected permanently by policy; we want the longest duration VPN connection to be 24 hours. We don't want ON-DEMAND to attempt a reconnect immediately after those 24 hours expire, is that not avoidable and the only answer is to give a longer login lifetime? If so, how do we ensure the maximum VPN session is 24 hours? Inactivity Logout is currently set for 4 hours. Should that be reduced?
... View more
08-27-2014
07:26 AM
We're experiencing this with Windows and OSX clients. The user connects on Monday, tunnel times out after 24 hours. User doesn't disconnect but lets the connection time out naturally. Immediately after time out, they receive an attempt to re-auth even though they had not instigated a new connection. This has resulted in some locked tokens and general confusion. How do we prevent the client from attempting to reconnect automatically after the connection naturally terminates due to the 24 hour time out session setting? Thanks.
... View more
Labels:
- Labels:
-
Configuration
-
Networking
-
Set Up
-
Troubleshooting
11-25-2013
10:07 AM
Global Protect, running 5.0.8 w/ Mac 10.8.5. Client connects and works fine initially. At intermittent times, a few times a day, the client has to manually Resubmit Host Profile for the HIP rules to re-engage and restore traffic flow. This is obviously a problem as the user doesn't realize this is happening until their traffic fails. This is happening w/two separate users both running 10.8.5. The HIP check for Mac is simply "Apple OSX", nothing more. Anyone else having this?
... View more
10-08-2013
06:55 AM
Is there a plan to resolve this? I'm currently forced to be putting in huge blocks of "ignore" ultrasurf in our policy set.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
12-16-2015
04:58 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks