This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About JaysonHaxton
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About JaysonHaxton
01-27-2023
4Posts
0Likes
1Solution
Jan 27, 2023Last Visited
User
Activity
User
Profile
Latest posts by JaysonHaxton
| Subject | Views | Posted |
|---|---|---|
| 325 | 12-01-2022 06:45 AM | |
| 344 | 12-01-2022 06:10 AM | |
| 287 | 11-01-2022 11:46 AM | |
| 336 | 11-01-2022 09:09 AM |
User Badges
Community Statistics
| Member Since | 10-13-2022 11:39 AM |
| Date Last Visited | 01-27-2023 03:39 PM |
| Posts | 4 |
12-01-2022
06:45 AM
I got it working. We are in the process of testing new CA software and I had an old CRL that was signed by a different CA, so I assume it was failing because it validate the signature.
I was only able to discover this by doing a packet capture on the 820 and saw that a CRL was being downloaded, just signed by the wrong CA.
I still don't know why I would see the traffic flowing through the 5250. Oh well.
... View more
12-01-2022
06:10 AM
I have a remote 820 that is connected to a 5250 via an IPsec tunnel. My CDP is directly connected to the 5250.
820<=====>5250<+++++>CDP
When I restart the IKE phase on the tunnel, I see the port 80 traffic on my 820, but is says the application is incomplete. When I check my 5250, I don't see any corresponding traffic (permits or denies).
I can ping the CDP from my 820 and my policies in both the 820 and 5250 are set to allow any port/service.
Is there another way for me to debug this on my 820 to see why the TCP connection is failing?
I've also adjusted the MTU on the Tunnel interfaces because there was fragmentation occurring.
... View more
11-01-2022
11:46 AM
Is there a reason that it's only attempting to only contact the 2nd CDP listed in the cert and not the first one? In the system logs it only shows it contacting the second CDP.
... View more
11-01-2022
09:09 AM
Is there a place in the PAN-OS to configure the CDP address or does it only learn it from the certificate? We have a new CDP we are testing and have added it's IP to our cert but the firewall is not attempting to contact it, only the second one. Is there a way to force it to connect to the new CDP?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
01-27-2023
03:39 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks