Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About Ameya-Kawimandan
About Ameya-Kawimandan
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
03-05-2021
385Posts
250Likes
121Solutions
Mar 05, 2021Last Visited
User
Activity
User
Profile
Latest posts by Ameya-Kawimandan
| Subject | Views | Posted |
|---|---|---|
| 1089 | 01-07-2014 05:50 PM | |
| 1759 | 01-07-2014 04:31 PM | |
| 1140 | 12-31-2013 03:19 PM | |
| 879 | 11-10-2013 12:41 AM | |
| 827 | 11-08-2013 01:16 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 06-12-2012 02:12 PM | |
| 1 | 06-05-2012 11:52 AM | |
| 1 | 05-31-2013 03:28 PM | |
| 1 | 04-24-2013 05:26 PM | |
| 1 | 08-26-2013 02:55 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 5 |
Retired Member
|
by
Retired Member
| |
| 4 |
Retired Member
| ||
| 1 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 02-22-2012 01:14 PM |
| Date Last Visited | 03-05-2021 11:17 AM |
| Total Messages Posted | 439 |
| Total Likes Received | 250 |
01-07-2014
05:50 PM
Hello Luigi , Custom reports do not provide the option to report the GP related events at the moment. Your best bet would be to filter the System logs (Monitor>System) and filter for ( subtype eq globalprotect ) . This will provide you all the GP related activity on the firewall such as : GP user name ,IP address, login and logout details etc. You may also filter this logs for the following events for more granular results : ( eventid eq globalprotectgateway-config-succ ) ( eventid eq globalprotectgateway-regist-succ ) ( eventid eq globalprotectgateway-logout-succ ) ( eventid eq globalprotectgateway-config-release ) ( eventid eq globalprotectgateway-auth-succ ) ( eventid eq globalprotectportal-auth-succ ) ( eventid eq globalprotectportal-auth-fail ) HTH, Ameya
... View more
01-07-2014
04:31 PM
Hello cornbelt140 , If you disable session cookies in the Captive portal (CP) config, a CP user mapping would be lost once the browser window is closed. Using is behavior to your advantage , a user using a shared Chromebook can just close the browser window to let a new user re-authenticate. The following Doc talks about Radius and User-ID integration in the environments using 802.1x devices and wireless access points and controllers. A script can be configured to run on the Syslog server that will extract the user and IP information from the message, format it correctly for the UID-API, and then send it to the API agent. Ref : UserID API integration using Syslog Also check : USER ID Issues HTH, Ameya
... View more
12-31-2013
03:19 PM
Hello Pepen, This feature of was introduced with OS-4.1. For OS pre-4.1, try to create a New VR before configuring a static route that would use a next-VR. HTH, Ameya
... View more
11-10-2013
12:41 AM
1 Kudo
1>Configure a loopback interface and allow https on this interface through interface management profile. 2>Create a Destination NAT rule to translate the traffic on Public IP + Desired Port (4443) to Loopback IP : port 443. 3>Allow this traffic through security rule 4>Remove the Interface management profile off the Public interface. HTH, Ameya
... View more
11-08-2013
01:16 PM
Is this because the Captive Portal policy for this subnet is active (and cannot be controlled by a schedule). Please elaborate if I misunderstood how to do this? CP page would be prompted as long as the HTTP GET request/HTTPS transaction reaches firewall's CP zone. Applying schedules to the security rule that allows applications dns and web-browsing for unknown-users would ensure that DNS resolution and web-traffic only succeeds during the desired schedule, indirectly controlling the prompting of CP auth page. Also there is abosolutely not way to 'log off' a PanOS captive portal session? Occasionally we make public computers available and it would be nice if the current user was able to log out before letting another user continue browsing the internet. Firewall sets a cookie so that future login requests become transparent to the user using session cookies in redirect mode, if the browser has not been closed, Try disabling this option so that a new user has to login when the current user closes the browser window. Currently there is no option to log off a CP user. HTH, Ameya
... View more
10-28-2013
11:54 AM
File blocking profiles can be used to block selected file types from being uploaded and/or downloaded, or generate an alert when the specified file types are detected. At the moment you can only control uploads/downloads of supported file types and cannot limit the size of uploads/downloads. Please speak to your SE if you would like to request this feature. HTH, Ameya
... View more
10-28-2013
11:45 AM
A policy can be scheduled using the option of Schedulers (Object>Schedules) . At present, schedules can be only applied to Security policies and not Captive portal policies. You may speak to your SE if you would like to request this feature. Closest option for scheduling CP would be to apply schedules to the security rule that allows applications dns and web-browsing for unknown-users, this way CP auth page will not be presented, but this option could be a bit clumsy. HTH, Ameya
... View more
10-22-2013
10:03 AM
1 Kudo
These settings are for the locally configured firewall administrators. I think the original question was pertaining to (Device > Local User Database > Users) Excerpt from Admin Guide: "Enable minimum password requirements for local accounts. With this feature, you can ensure that local administrator accounts on the firewall will adhere to a defined set of password requirements."
... View more
10-19-2013
02:09 AM
It is not possible to view logs imported from external servers on PAN-OS firewalls. Please contact your SE if you would like to request this feature.
... View more
10-19-2013
02:09 AM
It is not possible to view logs imported from external servers on PAN-OS firewalls/Panorama. Please contact your SE if you would like to request this feature.
... View more
10-19-2013
02:03 AM
This is not possible. Local user DB is part of configuration and can be removed only by deleting the configuration. Please contact your SE if you would like to request this feature.
... View more
10-15-2013
04:08 PM
You can restrict SNMP service to only single interface using a combination of following settings: Management Interface : Management Interface Settings (Device>Setup>Management Interface Settings) Dataplane interfaces : Interface management profiles (Ref :Firewall Management Using a Layer 3 Interface It is not possible to selectively enable polling of certain OIDs using SNMP v2 (community), you may configure SNMPv3 views and use the appropriate mask to allow polling only certain OIDs. How to Setup SNMPv3 Polling.
... View more
10-14-2013
01:55 PM
1 Kudo
This seems to be an issue related to configuration of Threat scanning as logs do not indicate any Buffer related messages. You should be able to confirm this by checking the session table for destination = DNS server in DISCARD state during the failure. Assuming : Clients and DNSproxy Interface===>ZONE WiFi DNS servers - Zone B You an create a security policy as follows: Zone WiFi to Zone WiFi app=dns with enabled thread prevention profile . Zone WiFi to Zone B app=dns Destination IP : DNS servers ==> Should not have threat profiles. HTH, Ameya
... View more
10-13-2013
03:13 PM
1 Kudo
Start with enabling debug for dnsproxyd and checking dnsproxy logs > debug dnsproxyd global on debug ===>ENABLE debug > less mp-log dnsproxyd.log ===== CHECK logs > debug dnsproxyd global on info ===>DISABLE debug Possible Issues: 1> Server Sending DNS Response larger than 512 bytes Extended DNS (>512B) option not supported with PA as proxy. FIX: Some DNS name queries are unsuccessful after you deploy a Windows Server 2003 or Windows Server 2008 R2-based DNS server 2> DNSproxy logs show " No buffer space available." Fixed with OS-5.0.8 Bug 50813—DNS proxy fails to proxy traffic with bursts of DNS requests, displaying the error: (errno: 105) No buffer space available. This was resolved by increasing the buffer. 3> Sessions for sourced from dnsproxy interface to the server being scanned spyware profile being discarded. Configure a security rule to bypass threat scanning for the traffic to the DNS server sourced from DNSproxy interface. You can enable threat scanning for traffic from the original clients to DNS proxy and also DNS response traffic (public DNS servers) if needed. HTH, Ameya
... View more
09-23-2013
03:54 AM
1 Kudo
Following references may help your decision : Reasons to migrate to PAN-DB from BrightCloud ? https://live.paloaltonetworks.com/message/24996#24996 User Experiences https://live.paloaltonetworks.com/message/25223#25223 Tech Note URL Filtering (PAN-DB)
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-05-2021
11:17 AM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
