Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About fcellini
About fcellini
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
07-02-2012
01:15 AM
It seems an issue that will be fixed at the end of the month with a new release of pan os 4.1.7
... View more
07-02-2012
01:10 AM
I've fount a problem on connection behind a proxy from a windows machine, on osx ok. It seems will be fixed with the release 4.1.7 at the end of the month.
... View more
06-21-2012
04:00 AM
So when there is the switch active to standby the pa doesn't receive the new arp from the same ip. There is a vlan configured with hsrp between ASR that connect the ip of the ASR to PA with a default route vs the PA? The PA are connected to L2SW with interface in access L3 mode, or L2 mode? When the ASR active goes down, the secondary ASR become active, but you haven't connectivity?
... View more
06-21-2012
01:17 AM
Hi, the ASR is configured in HSRP with another ASR, or with the L2SW? I don't understand. The HSRP is between two device interconnected by a PA fw? ASR------>L2SW----->PA------>ASR ? OR PA / \ L2SW / \ ASR1 ASR2 Let me know.
... View more
06-18-2012
12:40 AM
Can you explain in more detail your question? Hsrp is a Cisco System proprietary protocol, what do you mean for Pan-Os support hsrp?
... View more
06-15-2012
07:08 AM
Hi All, i've a globalprotect vpn to connect to office, when i'm at customer site. I use a macbook pro and vpn works well, on the other pc, a Dell with windows 7, the vpn works fine if i connect in thetering from my mobile phone, but if i try to connect over customer proxy i see up and down continuosly and the vpn doesn't work. i've also checked the route print, and i see it add and remove the default route over vpn a lot of time, and i can see on PA500 the connection established and logout. The pan and global protect client are updated at latest release. With the mac same proxy etc... works fine over proxy. Someone have an idea?
... View more
- Tags:
- globalprotect
- vpn
02-22-2012
08:26 AM
Thats not exactly what i said... i want all traffic from my pc when i'm from a customer goes by tunnel to my office, included my internet connection, and exclude from the tunnell only the subnet who i have to the customer. EX all 0.0.0.0/0 Pa-500 to office...(all traffic internet included) 10.50.0.0 Network customer excluded from tunnel. So i can reach all that i want inside my customer network without disconnect vpn connection. The vpn split as i see on PA i can specify the network to tunnel but i can't exclude a specific network, but is a things possible on small router with cisco vpn integrated isn't possible on Paloalto FW?
... View more
02-17-2012
02:35 AM
Hi all, there is a method on global protect to send all my traffic into the tunnel, but exclude the subnet range of the customer to remain connected with the office network and browse the web protected from office infrastructure, but with the possibility to work on all customer network and not only on the same lan? Thanks.
... View more
02-17-2012
02:18 AM
With a mac it seems to "work" but after a lot of attempt, without proxy no problem.. But on the same customer site changed the proxy with another proxy hasn't worked... Is a mix of condition i think.
... View more
02-11-2012
01:01 AM
Hi djrodb , why you have uninstalled this "trick" and not with the feature in the pkg file used to install the global protect?
... View more
02-10-2012
11:55 AM
If the option to disconnect with a ticket is unavailable or doesn't work with on demand mode... it's not explained on the document available to configure Globalprotect nor a banner or a warning message says... attention that features doesn't work with on demand features... It isn't a little bit stupid? For other things te PA says if there is something wrong. So my cases to support is opened and they hasn't said me nothing about that. I will see if there are news and i'll update you about that. Bye
... View more
02-10-2012
07:52 AM
I've asked for a feature to deny the unblock vpn and you say to uninstal?
... View more
02-09-2012
12:12 PM
I'm using all the last release, i've opened a ticket at suport team.
... View more
02-08-2012
05:53 AM
Differently from Cisco support Forum, it seem's frequented more from customer who helps each other, and less from Palo Alto Networks tech support. So maybe must be opened a case and after that report on this discusion the solution of the case.
... View more
02-07-2012
12:29 PM
No one have an idea for this? There isn't anyone from Palo Alto tech support?
... View more
02-07-2012
12:09 AM
For the app, i ve no problem in http or https, example facebook, facebook app or other, but for antivirus features when i try to download the eicar test file in http i see the block page, and in https i see the timeout as you. No news.
... View more
02-06-2012
05:40 AM
Hi all, im tryng various option to disable the global protect client on my macbook. The vpn client works fine, but if i select the disable option with ticket, or with pass code, and try to disconnect from the client it's disconnect without challange or request password. I've also specified to doesn't display the advenced tab and i see the option in grey... disabled, but if i click on show pannel it's also in advanced mode. The authentication type is local database, on demand.
... View more
01-23-2012
11:35 PM
Maybe i've not explained my problem correctly. With a pc on a network and my macbook behind PA-500 with blocked chat, app,post etc... with rockmelt i can do all, with safari the app is correctly blocked. I mean on the left pannel if i open facebbok page in rockmelt is blocked but on the column who appear on the left side the app isn't blocked. just now i've tried unblocking only facebook base, if i do i like on safari it doesn't work, on rockmelt i do i'like in the column on the left and when i update the page in safari i see that the i like was applied. All other block chat etc.. now works, there is a policy decrypt because i use it in https.
... View more
01-12-2012
03:18 AM
I'm doing some test on pa500 in our site, and trying to apply some feature like block of facebook app i see a strange behavior. First of all the policy of decrypt and bloking works correctly because the facebook is in "read only" state without possibility to do i like, or post with all the browser i've tested, but with Rockmelt browser i have facebook on shortcut, if i try to open in the web page it is blocked but if i see facebook from the "popup window" of rockmelt i can avoid this specific policy on PA. Some of you have done or can do some test to confirm this and eventually try to ask a fix. Thanks
... View more
Labels:
01-12-2012
03:10 AM
In My cases, the download from https was blocked only i don't see the response page as in http, i've tested with facebook and a lot of other app and the decrypt policies work.
... View more
01-10-2012
12:54 PM
Wich kind of policy do you use? from "outside or untrust" any to "inside or trust" any etc... with profile file blocking with a file blocking policy who check exe and dll files, in direction download or both direction with action continue and forward?
... View more
01-10-2012
12:37 PM
Hi i have generated the certificate directly from Paloalto, the problem was that the name of certificate. We have ricreate the certificate with name the ip address of appliance and now it seem's to be working better. Now using the eicar download test, trying to download a file in http i see a blocked response web page, and in https it remain in working and remain in cycling. It doesn't display the response page but don't proceed to download of the file. Have you seen the same behavior ?
... View more
01-05-2012
05:29 AM
how exacly? Can you be more explicit in your explaination? I have done a Decrypt policy but it seem not working so i suppose i'm doing it wrong. Thanks
... View more
01-05-2012
02:56 AM
Hi all, i'm currently testing some features of our PA-500, i've activated the antivirus policies and going on eicar i can see it blocks the download of the file, when i try to download from https the download proceed. How i can check and block antivirus threat over https session? The version of os is 4.1 and i've done all features update. Thanks to all.
... View more
08-18-2015
24Posts
0Likes
1Solution
Aug 18, 2015Last Visited
User
Activity
User
Profile
Latest posts by fcellini
| Subject | Views | Posted |
|---|---|---|
| 222 | 07-02-2012 01:15 AM | |
| 313 | 07-02-2012 01:10 AM | |
| 751 | 06-21-2012 04:00 AM | |
| 751 | 06-21-2012 01:17 AM | |
| 751 | 06-18-2012 12:40 AM |
User Badges
Public Statistics
| Date Registered | 01-03-2012 05:39 AM |
| Date Last Visited | 08-18-2015 09:07 AM |
| Total Messages Posted | 24 |
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-18-2015
09:07 AM
|
Latest Tags
No tags yet
Latest Blogs
Copyright 2007 - 2020 - Palo Alto Networks
