Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About dpalani
About dpalani
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
08-19-2020
53Posts
27Likes
10Solutions
Aug 19, 2020Last Visited
User
Activity
User
Profile
Latest posts by dpalani
| Subject | Views | Posted |
|---|---|---|
| 1632 | 04-18-2014 07:21 AM | |
| 445 | 04-16-2014 05:05 PM | |
| 1941 | 04-16-2014 08:40 AM | |
| 1601 | 04-15-2014 08:42 AM | |
| 366 | 04-14-2014 08:42 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 10-07-2013 07:50 AM | |
| 1 | 07-03-2013 02:58 PM | |
| 1 | 12-30-2013 02:19 PM | |
| 2 | 12-30-2013 07:35 AM | |
| 1 | 12-12-2013 10:51 AM |
Posts I Liked
User Badges
Public Statistics
| Date Registered | 01-11-2012 01:32 PM |
| Date Last Visited | 08-19-2020 05:39 PM |
| Total Messages Posted | 76 |
| Total Likes Received | 27 |
10-23-2020
04:52 PM
hey just wondering if you found a solution to this, Im having some of those unknown, and that messes up with the rules that has user ID in it. very sporadic, impossible to troubleshoot. thanks
... View more
09-11-2020
05:31 AM
As you already discovered this is per design. I believe not only Palo Alto but any registered partner can issue 30days VM-100 licenses. It is a well-known limitation documented in the admin guides and KB here - No Logging in Unlicensed VM-Series Firewall
... View more
11-04-2016
09:55 AM
For GMail you also need to block the 'quic' application with a policy that precedes the policy that ties to the File Blocking profile. Refer to https://live.paloaltonetworks.com/t5/Configuration-Articles/Google-Services-are-Not-Decrypted-when-Accessed-from-Chrome/ta-p/65518
... View more
04-16-2014
05:05 PM
1 Kudo
Oracle PLM uses tcp port 1521, if I am right. If that is the case application signature is available on the firewall. The application is named as "oracle" HTH
... View more
04-16-2014
12:34 AM
from 6.0.1-2 tech note https://downloads.paloaltonetworks.com/software/User-ID_Agent-6.0.1-RN.pdf?__gda__=1397676798_23c31b2f09e0be1f6752060ff1… Operating System (OS) Compatibility User-ID Agent 6.0 The following table lists the supported operating systems for the User-ID Agent: Host Computers • Microsoft Windows XP/Vista/7 • Microsoft Windows Server 2003/2003 R2 • Microsoft Windows Server 2008/2008 R2 Regards Slawek
... View more
04-29-2014
08:50 AM
Thanks but that didn't work, and I'm at PAN-OS 5.0.9, It just kept trying to upload the file, but I got an error in IE. I'm thinking it is the IE 8 version, I'm in a closed environment and can't change the setting in IE. So I'll have to do it via the mgmt port at the firewall not from my desktop. Thanks M
... View more
05-21-2014
09:11 PM
Is this a multi domain environment and do you have server session read enabled? For multiple domain environments the data gathered from open sessions may not be accurate. This method does not deliver domain data with the user name and it is assumed that the user is a member of the domain that the monitored server is part of.
... View more
04-11-2014
10:27 AM
No, you do not have to create class for each application, by classifying an application to a class (multiple applications can be classified to one class). Traffic/applications that belongs to one class will be put in a queue for that class for utilizing the bandwidth, eg. you can classify youtube and netflix as class 3 and say that maximum guaranteed is 2 mbps. This 2 mbps will be shared by these applications, this does not necessarily mean youtube will get 1 mpbs and 1mpbs for netflix. If no one is using netflix youtube traffic will get 2 mbps. Hope that helps. Regards, Deepak
... View more
04-21-2014
03:54 AM
Are there any screenshort for heartbleed attack into system ? Please share ?
... View more
04-11-2014
01:41 AM
1 Kudo
I've just realised, that CET is actually CEST at the moment because we're on summer time. So it's not 3 letter right now.
... View more
04-14-2014
01:03 AM
Yep, we started with dedicated user with only required permissions according to PA guide. However customer has 2003 AD and 'event reader' groups is not present there. So instead of going through specific procedure for 2003 AD permissions (also described in one of the PA guides), the customer decided to give domain admin rights to the user.
... View more
04-07-2014
05:38 PM
I'm surprised to see this crop up. There were HA issues in 5.0.10 and the release notes for 5.0.11 note the three HA bugs fixed by this release. You may have run into a new bug with this issue. PAN-OS 5.0.11: Addressed Issues You may want to open an ticket so it can be examined by support to confirm if this is a problem or not. And if it is get it into the bug fix chain.
... View more
12-31-2013
07:46 AM
Lets say there was never an application shift, even in this case there will be two logs for the same session id. This is because the firewall does a security policy look up to allow the service first (i.e the SYN in a TCP session ), since this is the start of the session a log will be generated for this. Once the application is identified and session is closed the log at session end will generate a traffic log for this. Form a information POV the log at session end will have more info than log at session start in terms of number of bytes sent in C2S and S2C flow. You'll end up with duplicate logs for the same session. In which one is more useful than the other based on the issue you are troubleshooting. Regards, Deepak
... View more
01-02-2014
04:16 AM
I found when updating to 5.0.9 from 4.1.x that some old rules for excluding networks from user id scanning (Network tab -> Zones) reappeared in some strange way - at the time I put it down to me being a bit far fingered, but maybe this applies in your case too ?
... View more
12-31-2013
07:48 AM
1 Kudo
Also, if you're new to deploying User identification on the firewall, here's a good document to get a good understanding on how it works - https://live.paloaltonetworks.com/docs/DOC-5939
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
