This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Mick.Ball
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Mick.Ball
05-02-2023
6Posts
2Likes
0Solutions
May 02, 2023Last Visited
User
Activity
User
Profile
Latest posts by Mick.Ball
| Subject | Views | Posted |
|---|---|---|
| 663 | 05-02-2023 08:48 AM | |
| 811 | 10-07-2022 11:45 AM | |
| 1236 | 09-30-2022 09:50 AM | |
| 1497 | 09-30-2022 12:33 AM | |
| 1537 | 09-29-2022 01:05 PM | |
| 1687 | 09-28-2022 02:52 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 05-02-2023 08:48 AM | |
| 1 Like | 10-07-2022 11:45 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 2 Likes |
User Badges
Community Statistics
| Member Since | 09-22-2022 01:46 AM |
| Date Last Visited | 05-02-2023 05:25 PM |
| Posts | 6 |
| Total Likes Received | 2 |
05-02-2023
08:48 AM
1 Kudo
by default It will prompt you for an OTP every time unless you use authentication override.
you could set the lifetime to 1 day so would only be prompted once every 24 hours regardless of how many times you disconnect.
I do not know if there is a limit but perhaps 10 years would be too long.......
FYI, we use the authentivation overide to gateways only as this saves using 2 x OTP. (thats if you use on OTP both portal and gateway)
... View more
10-07-2022
11:45 AM
1 Kudo
As per @TomYoung reply. You need to refresh GP to update any split tunnel change/addition.
... View more
09-30-2022
09:50 AM
Thanks again for your help Adrian, that was one of the first things I looked into as had a similar issue years ago. We do use NTP and cli time check and dashboard show time is spot on….
I have logged a call with our palo support and they are also struggling for a reason/solution. I’m going to bounce one of the gateways tonight as been up for 135 days…. Clutching at straws but you never know, thanks again for your time.
... View more
09-30-2022
12:33 AM
The certificate expired years ago, it just seems to use the keys for cookie encrypt/decrypt.
I have added a new cert and portal/gateway on one of the failing devices and still no good.
there are no errors in pa or gp logs. The log output for both is the same if you remove the option to accept cookies.. it just prompts for OTP. It seems to ignore the accept option but it shows as selected when you do show gateway…… on cli.
... View more
09-29-2022
01:05 PM
Hi Adrian, many thanks for your reply, yes it has expired.. but it has expired on the portal and 6 gateways yet one of the gateways is still accepting the override. This has same settings as all the other 5 gateways that are failing…
... View more
09-28-2022
02:52 AM
Been using Radius auth to portal with auth override to gateway for years but seems to now be playing up... Gateway is requesting radius auth and ignoring override settings.
This is the same issue on both Windoze and IOS.
PA 3020 9.1.14
We have no custom checks, just Radius auth (which is working fine)
Many thanks in advance...
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-02-2023
05:25 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks