Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About Hithead
About Hithead
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
a month ago
203Posts
37Likes
9Solutions
Mar 12, 2021Last Visited
User
Activity
User
Profile
Latest posts by Hithead
| Subject | Views | Posted |
|---|---|---|
| 1429 | 06-28-2017 02:54 AM | |
| 2345 | 05-22-2017 04:25 AM | |
| 659 | 11-02-2016 07:43 AM | |
| 840 | 09-27-2016 06:50 AM | |
| 6416 | 09-27-2016 02:12 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 09-20-2016 06:49 AM | |
| 1 | 08-15-2016 05:28 AM | |
| 1 | 07-27-2016 07:50 AM | |
| 1 | 12-01-2015 07:48 AM | |
| 5 | 10-01-2015 03:51 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 11 | |||
| 2 | |||
| 14 | |||
| 1 | |||
| 2 |
User Badges
Public Statistics
| Date Registered | 09-19-2012 05:12 AM |
| Date Last Visited | a month ago |
| Total Messages Posted | 245 |
| Total Likes Received | 37 |
06-28-2017
02:54 AM
Hi, check the User-ID Agent logs. May the "User Identification Timeout" value is to low... Can you please share the User-ID agent settings? we run this settings for years, without any trouble: <timeout enabled="1" entry-timeout="840"/>
... View more
05-22-2017
04:25 AM
can you please upload a screenshot of the traffic and url logs? (deny and allow case)
... View more
11-02-2016
07:43 AM
how is the portal configured? on-demand?
... View more
09-27-2016
06:50 AM
hi, note the time and date when it happens again, collect all logs from the Client (PanGPSupport) and take a look at the PANGPS logs. May you will find something what could cause the issue...
... View more
09-27-2016
02:12 AM
i have the same messages: 2016-09-27 11:02:39.493 +0200 connecting to ldap://[XXXXXX.domain.com]:636 with StartTLS... 2016-09-27 11:02:39.496 +0200 Error: pan_ldap_init_ex(pan_ldap.c:249): start_tls_s return(-1) : Can't contact LDAP server 2016-09-27 11:02:39.496 +0200 connecting to ldaps://[XXXXXX.domain.com]:636 ... 2016-09-27 11:02:39.609 +0200 ldap cfg Pan_Grp connected to XXXXXX.domain.com:636(index 0) looks like, it tries to connect with normal LDAP:636 and then successfully with LDAPS:636. LDAP:636 will not work... Checkbox "SSL required" is checked and it still tries LDAP:636 first...
... View more
09-20-2016
06:49 AM
1 Kudo
hi, you mean "drop"?..."block" is not available...
... View more
08-19-2016
06:39 AM
hi, you can create a custom vulnerability signature to block it. But you have to Wireshark the traffic (down- or upload) with these files. In the pcap you can read out the "file-unknown-body" signature of that file which looks like \x3136977BB061728878688662\x with this condition you can configure a pattern-match and the action to block the traffic. More information are available here: https://live.paloaltonetworks.com/t5/Featured-Articles/Tips-amp-Tricks-Custom-Vulnerability/ta-p/71603 https://live.paloaltonetworks.com/t5/Documentation-Articles/Creating-Custom-Threat-Signatures/ta-p/58569?attachment-id=1097 https://live.paloaltonetworks.com/t5/APIs/Custom-signature-file-upload-blocking/m-p/25448/highlight/true#M650
... View more
08-15-2016
05:28 AM
1 Kudo
first ssl and web-browsing allowed the traffic until ultrasurf could be detected... i would suggest to block the url category proxy-avoidance-and-anonymizers
... View more
07-27-2016
07:50 AM
1 Kudo
try to right click on the NIC under device manager and uninstall it with the option "delete the driver software for this device". Then remove GP. Reboot your client and try to install GP again. Which version you are trying to install?
... View more
12-01-2015
07:48 AM
1 Kudo
>configure
# set network interface ethernet <name> layer3 untagged-sub-interface <yes|no>
# set network interface ethernet <name> layer3 units <name> tag <1-4094>
.... and then IP configuration etc.
... View more
12-01-2015
02:07 AM
set the dhcp options in the registry would not help. the "true" dhcp options are set deep in "netsh".
Sorry, but my skills on powershell is not good engough to write you an example.
But please find here http://www.ingmarverheij.com/read-dhcp-options-received-by-the-client/ a ps showing the DHCP options. may you can do some research with this ps script example and find a set command instead of show...
... View more
11-09-2015
02:28 AM
Hi,
How you imagine to build up a Client-VPN connection without any agents?
PANOS requires GP for Client-VPN.
... View more
11-09-2015
02:11 AM
Dear community,
have you ever tried to exclude IPs from the VPN tunnel using the GP 2.3 feature:
https://www.paloaltonetworks.com/documentation/70/globalprotect/globalprotect-admin-guide/set-up-the-globalprotect-infrastructure/deploy-agent-settings-to-windows-clients.html#88302
In Windows "route add" or "netsh" commands requires elevation (run as Administrator). Even to be logged in with a admin account doesn't help.
I tried to run a powershell script (regkey command: powershell.exe C:\temp\routing.ps1) instead of a batch file with GP 2.3. . GP-Service logs looks good.
So my question: How GP can run scripts which requires elevation???
... View more
Labels:
- Labels:
-
Configuration
-
GlobalProtect
-
Network
11-04-2015
06:28 AM
it depends on the routing table (default gateway)... so far i know...
But why running a client with two NICs?
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
