This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About porq91
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About porq91
09-05-2022
8Posts
0Likes
0Solutions
Sep 05, 2022Last Visited
User
Activity
User
Profile
Latest posts by porq91
| Subject | Views | Posted |
|---|---|---|
| 1083 | 09-04-2022 01:08 PM | |
| 2767 | 08-31-2022 07:40 AM | |
| 2833 | 08-30-2022 02:23 AM | |
| 1698 | 06-25-2022 12:40 AM | |
| 1708 | 05-30-2022 08:27 AM | |
| 2037 | 05-28-2022 01:07 PM | |
| 2069 | 05-28-2022 11:08 AM | |
| 2181 | 05-28-2022 01:02 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes | |||
| 1 Like | |||
| 2 Likes |
User Badges
Community Statistics
| Member Since | 05-28-2022 12:52 AM |
| Date Last Visited | 09-05-2022 05:17 PM |
| Posts | 8 |
09-04-2022
01:08 PM
Hello everyone.
i'm configuring decryption with ssl-inbound inspection towards a nas synology via DNAT port-forwarding but i'm having trouble working with the following error that gives me the browser "PR_END_OF_FILE_ERROR". DNAT without ssl-inbound inspection works fine without certificate errors if I try to reach the web server from outside.
I have imported the certificate and the priv-key of the synology correctly on the fw and applied to the decryption policy, but I doubt that the zone-level decryption policy is wrong.
I post a couple of screens for completeness, decrypt, nat, security and logs
Actually topology: internet--->router(dnat to ptp-fw)--->FW(dnat to synology TCP 5001)---->SYNOLOGY
Thanks in advice,
Angelo.
... View more
- Tags:
- decryption
- ssl
08-31-2022
07:40 AM
After hitting my head for quite a while I finally solved it by removing the current clientless VPN package, uploading the same version of the package to the firewall and reinstalling it.
Currently I see all the icons and the port forwarding works correctly, it will be interesting to see what will happen to a possible restart or update of the device if it continues to work.
Angelo.
... View more
08-30-2022
02:23 AM
Hello everyone,
i installed the clientless vpn and up to the login page everything is fine, but when i click on one of the apps i set it gives me the error "404 page not found", I don't have any kind of traffic log that I can analyze, the globalprotect vpn and clientless packages are correctly installed.
The security policies are correct, I also tried to downgrade the release, restart everything but nothing seems to work.
Any advice?
Release: 10.2.2-h2
Device: PA-220
Thanks in advice,
Angelo.
... View more
- Tags:
- clientless VPN
- vpns
06-25-2022
12:40 AM
Hello, what exactly happens when the firewall reaches the Session Count Limit? Discard the new sessions? and above all as regards the globalprotect VPNs are impacted? In my scenario I have two 5250 PAs working in HA Active / Passive and corporate VPNs go through globalprotect, I was wondering what happens if the FW reaches the session limit. Thanks in advance.
... View more
05-28-2022
01:07 PM
Work greatly, just last thing, if i wanted to add multiple ip's at once is this the right format? because in this way it does not add all the ip's curl --insecure -XPOST -H "Content-Type: application/json" -u admin:minemeld "https://10.0.0.4/config/data/node-bad-domain_indicators/append?h=node-bad-domain&t=localdb" -d ' { "indicator": "8.8.8.8", "indicator": "8.8.8.2", "indicator": "1.1.21.1", "indicator": "1.1.51.1", "indicator": "1.15.1.1", "indicator": "1.6.1.1", "indicator": "1.1.2.1", "indicator": "1.1.3.1", "indicator": "1.4.1.1", "indicator": "2.1.1.1", "type": "IPv4", "comment": "usual Google DNS Public IP", "share_level": "green", "confidence": 100, "ttl": 3600 }'
... View more
05-28-2022
11:08 AM
Thanks @aleksandar.astardzhiev, much appreciated. However I have a couple of concerns: First, the url https://my-minemeld.local, should my-minemeld.local be replaced with the ip of the machine that hosts minemeld? Second of all, I have no idea how to do the POST request you recommended. Excuse the stupid question but this is the first time I have worked on this kind of application.
... View more
05-28-2022
01:02 AM
Hi everyone, we have installed minemeld in our facility and it's great, but we are having trouble implementing a solution that takes lists internally, our current goal is to update the list manually based on the ipv4 / url we get from our security team. Is there any guide that explains how this can be done? Thanks , Angelo.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-05-2022
05:17 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks