About Kalemegdan

Kalemegdan · ‎04-23-2019

Cool, thanks

Kalemegdan · ‎02-27-2019

Cool thank you. I understand that byt my question is HOW? I do have a firewall configuration that was exported from the firewall i have no access to so i cannot create a new device since it asking me for a SN. The only file i have is a config.hml file. What is process to upload file to the expedition? Do i use Projects Tab?

Kalemegdan · ‎02-27-2019

HEllo i want to use expedition to check firewall configuration instead of looking thru hml file. Is it possible to import this config file (config.hml) inot expedition to see the firewall rules in GUI? Appreciate if someone share a how-to steps.. Thanks

Kalemegdan · ‎01-22-2019

Hello i have following firewalls infrastructure in Panorama: FW1 FW2 FW3 i want to add admin read-only access to user1 for FW1 but readwrite access for user1 to FW2 and FW3. How can i do it while using Panorama? Appreciate responce..

Kalemegdan · ‎11-28-2018

Thank you. Aprreciated.

Kalemegdan · ‎11-27-2018

Hello are there any minimum requirements for PAN OS version, GP client version to successfully use SAML for GP client authentication?

Kalemegdan · ‎10-26-2018

OK, thanks for a quick feedback and i do understand; i will wait a bit for others to provide any suggestions. Appreciate your response..

Kalemegdan · ‎10-26-2018

Thanks for your feedback. Do you (or anyone else) have experience using any of these tools? And if you do, which one woudld you suggest?

Kalemegdan · ‎10-18-2018

Hello i am looking for a way to test DoS protection policy in the lab environment before we implement it in production and wondering if there is tool (or linux-based traffic generator) that might be able to assist in generating traffic that will trigger DoS protection policy?

Kalemegdan · ‎05-08-2018

Hello is it possible to have a scheduled custom report (lets say once a month) delivered into mailbox in excel format instead of pdf? Excel format is available if you want to export report that was created on demand. Thanks

Kalemegdan · ‎08-11-2017

Cool, thanks

Kalemegdan · ‎08-10-2017

Hi, i have a PA200 for a testing purposes i want to enable clientless VPN access. Went to Device/licences and i see i do have a licence enabled. then going to Device/dynamic update i do have clientless software uploaded: but when i try to activate it by going to device/ssl vpn client i cannot see it. Looks to me i have it all there but... Do you guys mind providing quick how-to i can enable and setup the cleintless VPN conenction? Appreciate.

Kalemegdan · ‎05-19-2017

I dont care about existing config, it will get new config anyway.

Kalemegdan · ‎05-19-2017

Yes i am able to get into MAINT mode. i thnk i have OS version 6.x Welcome to the PanOS Bootloader. U-Boot 6.0.2.0-54 (Build time: Apr 17 2014 - 19:09:30) what bothers me is this: /bin/mkdir: cannot create directory `/new_root': No space left on device /bin/mkdir: cannot create directory `/new_root': No space left on device Which maint option i should go with?

Kalemegdan · ‎05-19-2017

Hello i inherited on PA-200 on my new job and want to get it back on IT life. While booting i observed the CLI and this is what i got. Needless to say i have no responces to any command entered. Is anyone abel to provide some info how to set it up again? Apprecaited responses. mount: can't find / in /etc/fstab or /etc/mtab error writing /etc/mtab.tmp: No space left on device mount: can't find / in /etc/fstab or /etc/mtab Setting affinity to 0x1 INIT: version 2.86 booting Welcome to PanOS Starting udev: [ OK ] Setting clock (utc): Fri May 19 08:44:33 PDT 2017 [ OK ] Setting hostname localhost: [ OK ] Checking filesystems: Running filesystem check on pancfg: [ OK ] Running filesystem check on panrepo: [ OK ] [ OK ] Remounting root filesystem in read-write mode: mount: can't find / in /etc/fstab or /etc/mtab [FAILED] mount: can't find / in /etc/fstab or /etc/mtab Enabling /etc/fstab swaps: [ OK ] INIT: Entering runlevel: 3 Entering non-interactive startup /sbin/ldconfig: Writing of cache data failed: No such file or directory Starting Networking: [ OK ] Starting system logger: [ OK ] Starting kernel logger: [ OK ] Starting portmap: [ OK ] Starting NFS statd: [ OK ] /sbin/ldconfig: Writing of cache data failed: No such file or directory Generating SSH2 DSA host key: [ OK ] Generating SSH2 RSA host key: /sbin/pan-sshd-keygen: line 154: echo: write error: No space left on device [ OK ] Starting sshd: [FAILED] /sbin/ldconfig: Writing of cache data failed: No such file or directory /sbin/pan-sshd-keygen: line 154: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 84: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 85: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 86: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 87: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 88: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 89: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 90: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 91: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 92: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 93: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 94: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 95: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 96: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 97: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 98: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 99: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 84: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 85: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 86: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 87: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 88: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 89: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 90: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 91: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 92: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 93: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 94: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 95: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 96: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 97: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 98: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 99: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 84: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 85: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 86: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 87: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 88: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 89: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 90: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 91: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 92: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 93: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 94: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 95: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 96: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 97: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 98: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 99: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 84: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 85: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 86: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 87: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 88: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 89: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 90: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 91: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 92: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 93: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 94: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 95: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 96: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 97: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 98: echo: write error: No space left on device /sbin/pan-sshd-keygen: line 99: echo: write error: No space left on device Starting ha-sshd: dir [FAILED] /etc/rc3.d/S58ntpd: line 19: [: =: unary operator expected Starting ntpd: [ OK ] Starting NFS services: [ OK ] Starting NFS daemon: [ OK ] Starting NFS mountd: [ OK ] Starting PAN Software: port_link: module license 'Proprietary' taints kernel. Disabling lock debugging due to kernel taint [ OK ] dir

Kalemegdan · ‎04-11-2017

Good point but i actually tested access from different workstations with the same results. Still puzzled with the fact that i was unable to get a clear answer from support personel about "differences" in configuration.

Kalemegdan · ‎04-10-2017

That was my question to PAN support - i opened a case and showed them the config logs but they were unable to figure it out 😞

Kalemegdan · ‎04-10-2017

i actually find the issue; some of the required ap[plications to get login.microsoftonline.com were disabled; I created a new rule to allow ms-office365, ssl, stun and web-browser to get it going..

Kalemegdan · ‎04-10-2017

So far only this url..

Kalemegdan · ‎04-10-2017

Yup no luck

Kalemegdan · ‎04-10-2017

hi The whole company behind PAN firewall is unable to connect to https://login.microsoftonline.com. no blocked page, just "sign in to your account" web portal but no place to login. Firewall does not show any blocked/dropped connection to this URL. I create a brand new test rule, put on top of the rule sets but no luck. Any suggestions/idea appreciated.

Kalemegdan · ‎12-22-2016

Hello, is it possible to run a report that shows the elapsed time for a session going outside the network? Basically showing any sessions that have been connected for more than 24hours? Most likely not based on default timeouts but just to confirm Thank you.

Kalemegdan · ‎06-28-2016

Well, it is kind of hard to grasp to the logic that i need to create a deny rule to everything else in order to limit access to certain resources, as a separate policy. Anyhow, thanks for your suggestion, i managed to get it going by following your suggestion, moving two VPN policies (allow, deny) above a common policy, and applying it to contractor's AD username. Thanks

Kalemegdan · ‎06-28-2016

I do have a vpn access rule, kind of a generic, that covers all users (COMMON-SSL-VPN). Unfortunatelly contractor can login and can access all internal resources and rule actually does not hit... I even tried the rule using locally cretaed user (changed authentication accordingly) with the same results - contractor can access all resources.

Kalemegdan · ‎06-27-2016

Hello i have a need to provide a contractor with VPN access to certain resource on internal network (let’s call them 10.20.1.0/24) I have a working VPN GP/Portal and contractor can connect to VPN with no issue. But contractor is allowed to access all internal resources not just 10.20.1.0/24 I have setup a GP policy (allow access from VPN zone to internal zone, destination 10.20.1.0/24 only), put that policy above generic VPN (allow all) and when user logs in, this policy is not hitting; instead default policy (which will allow al AD users to login) is utilized. We are using MFA for authentication, AD has user contractor created, all looks fine. For testing i created another GP portal with local authentication, put user into local group and he is able to conenct but still not prevented from accessing internal resources. The question is - how can i bound a ACL into VPN access policy? I know in other vendors it was mater of assigning ACL to VPN profile that can get pushed down to the user when they connect to VPN. Apprecaite valuable inputs.

Kalemegdan · ‎01-18-2016

can you ping panorama host from your new firewall CLI using firewall management interface IP as a source? Not sure but you might need to adjust source routing (for Panorama) only to use management interface IP; i had simmilar issue that solved with source routing setting.

Kalemegdan · ‎01-07-2016

I tried to rearange columns but still did not get any better results; even worse 🙂 Thanks for your reply; i am running IOS ver 6. and will try to get same report on my test PAN running ver 7.

Kalemegdan · ‎01-06-2016

Hello friends is it possible to customize report column width in such a way that, for example, name of my firewall (which is added to report by choosing firewall SN field) will not get cut off, like in my attached report example? Thanks for feedback..

Kalemegdan · ‎12-09-2015

i created this report - repeat count report... It might help...

Kalemegdan · ‎12-09-2015

Hi, thanks for your feedback. Unfortunatelly if i change firewall based admin role for Virtual system, in Web UI tab interface, in Network section only zones and Global protect are available for selection of enable, readonly or disable. Admin role for Device does have all tabls available under Network subsection so i think i might need to infor customer that there is no way to hide interface tab.

Date Registered	‎07-17-2015 10:30 AM
Date Last Visited	‎04-23-2019 05:02 PM
Total Messages Posted	40
Total Likes Received	6

Online Status	Offline
Date Last Visited	‎04-23-2019 05:02 PM

Strata

Prisma

Cortex

About Kalemegdan