About akilan.r@tutelartechlabs.com.panwpartner

Firewall A Previously Default  Device Telemetry region is America  After sudden commit fails due to error : 'Americas' does not match lcaas region 'in'  So i changed the telemetry to india which is present in the drop down. Now , In firewall B vice versa i am receiving error : 'in' does not match lcaas region 'america' And also there is only america region present in the drop down .    firewall A - only India region showing in telemetry  firewall B - only America region showing  in telemetry    ... View more

In pan-os 9.1.15-h1 , I have configured hip object and also called in hip profile, The Agent submits the hip data to the firewall after that also no log is found in HIP-Match log, then even i had changed and try for hip match OS as windows that too had no matches.  global-protect log it is found that gateway hip report is successful but there is no log in HIP-Match log.   Hip-object for OS, Hip Profile,   GlobalProtect log,         License details,  HIP-Match log,      Agent Collecting Hip details, ,   Here i  also followed troubleshooting document , https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boP1CAI But hip match not found and report is also not generated > show global-protect-gateway current-user   > debug user-id dump hip-report ip 192.168.31.4 user domain\username computer USERNAME-PC                 ... View more

  Hi Team, I configured DNS proxy Interface e1/1 - 192.168.29.245 to clientless vpn. DNS-Proxy resolves as, General browsing resolves with DNS 8.8.8.8 and 1.1.1.1 Tutelartechlabs.com resolves with DNS 1.1.1.2 and 4.4.4.4 Amazon.forest.in (internal-application) resolves with DNS 172.30.30.31   Note: DNS-Proxy interface is the interface that act as a proxy and queries for dataplane traffic instead of management interface setup-->service-->DNS. so the question is why my management interface 192.168.29.250 queries for amazon.forest.in to the DNS server when the application is accessed by a user in clientless-vpn  instead of my DNS-Proxy Interface 192.168.29.245. I have attached both pcaps from server and the firewall.   ... View more

Hello All,   This is my topology I have configured Clientless VPN hosting two application as, paloaltonetworks.com (external-application) and amazon.forest.in (internal hosted application). But i am unable to access the application that hosted inside. In this question have attached my configuration also.  other than that there is no sent byte for clientless-VPN traffic also.             External application works but no sent bytes ? ISSUE NOTE : 1.External Application working but there is no sent bytes                          2.Internal Application not accessible ... View more