Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About InderjitSingh
About InderjitSingh
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
03-27-2020
69Posts
0Likes
0Solutions
Mar 27, 2020Last Visited
User
Activity
User
Profile
Latest posts by InderjitSingh
| Subject | Views | Posted |
|---|---|---|
| 2175 | 11-14-2019 10:35 PM | |
| 2184 | 11-14-2019 03:21 PM | |
| 2291 | 11-10-2019 08:22 PM | |
| 840 | 06-23-2019 09:51 PM | |
| 486 | 05-12-2019 09:50 PM |
User Badges
Public Statistics
| Date Registered | 07-21-2015 11:28 PM |
| Date Last Visited | 03-27-2020 05:50 AM |
| Total Messages Posted | 75 |
11-14-2019
10:35 PM
User has performance issue when access a file in trust zone of the firewall over GP,ipsec tunnel. I read on net SMB traffic over vpn is not very good.There are lot of tcp retransmissions.
... View more
11-14-2019
03:21 PM
No security profiles. Not affecting every customer. My question is what sort of overhead can be seen in GP
... View more
11-10-2019
08:22 PM
I have VM300 with GP without split tunnel. Between with and without GP their is a lose of around 6mb. Is it acceptable to have 6mb of overhead lose? Will enabling/disabling ipsec in ssl vpn setting make any difference.
... View more
06-23-2019
09:51 PM
PA3020 PANOS-8.1.7 GP-4.0.7 Using Radius server for auth. Radius talks to Azure MFA for 2 factor auth. Having timeout issues. Sometimes user not getting MFA prompt on the phone. If the get MFA prompt they will get auth errors.
... View more
05-12-2019
09:50 PM
VM300- PANOS-8.1.7 Is it possible to monitor tunnel bandwidth using Mibs.
... View more
04-07-2019
10:29 PM
I have customer firewall running 8.0.x . I have AD configured for customer using service route going into trust zone as required. But I would like to manage the firewall at the moment managed wth single local superuser. Is it possible to use AD auth for this as well.
... View more
- Tags:
- configuration
- ldap
02-26-2019
05:31 PM
I tried to upgrade a VM-200 from 7.1.10 to 8.0.15 but it failed as we had 4Gb RAM. Is the requirement for upgrading to 8.0.x is 2xcpu,6.5gb –ram and 60gb. Is it the same if we upgrade to 8.1.x after upgrading to 8.0.x. Currently we have 40GB -- Can we resize this existing disk to 80GB on Hyper-v (VHDX) ? If we do so does PANOS automatically detects the changes we made.. Or the correct procedure is to add another disk ? ( need procedure for hyper-v)
... View more
02-25-2019
07:14 PM
I have security policy untrust -trust(webserver publicip) and nat policy - untrust -untrust. Wheni try to access web server public ip it is not hitting the security policy and is considering the destination in untrust zone and denies the traffic. Pa200 7.1.10
... View more
02-19-2019
02:11 PM
I have checked that article its for upload. I am looking at limiting download. eth1/1 - untrust eth1/2-trust for download if u will apply to eth1/2 what would be src inter and source subnet? I want to limit bandwidth to 4 subnets in trust 10.20.72.0/24,10.30.72.0/24 .... for downloading.
... View more
02-19-2019
01:19 PM
I have 4 subnets in trust which i would like to restrict bandwidth usage to 50mb. PA3020 Panos- 8.0.12.
... View more
01-14-2019
02:51 PM
PA3020 ,8.0.12. I have working GP with a public ip. I am trying to setup 2nd GP with 2nd public ip. This 2nd ip is used as destination nat for rdp as well. When I configure the loopback interface with 2nd ip and use it in portal and gateway ,rdp gets broken.
... View more
01-06-2019
07:01 PM
I have a working portal and gateway on PA3020 running 8.0.12. I want to setup another portal and geteway and repliciate all the settings. Second GP will be used for testing purposes. Only changes would be to use another public ip ,create another tunnel and loopback interface and ip pool. Just want to make sure I dont break prod global protect while creating test GP.
... View more
12-18-2018
06:29 PM
I have ldap server setup with auth profile. User gets authenticate by ldap server and can login via global protect. User is part og the group and a policy is created for this group to access resources. If i change the group to any access is granted but not with specific group in policy.
... View more
12-16-2018
06:28 PM
I am running VM-500 in cluster on 8.1.4 . I have global protect configured with ip pool of /24. I need to redistribute this range via bgp. I can see this range in the routing table.
... View more
11-27-2018
03:47 PM
Upgraded VM-ESX firewall from 8.0.12 to 8.1.4 and seeing bgp flapping to all the 3 peers. Its happening every 15sec. Checked timer match.
... View more
08-26-2018
04:22 AM
When user is connected via global protect. How can destop support person connect to user pc who is logged in via global protect. I tried with desktop connected to global protect and then trying to access user pc who is also connected via global protect. Since users connected via global protect are in VPN zone. Allowing VPN intrazone traffic doesnt show anything in the logs.
... View more
12-04-2017
11:06 AM
I have customer using TMG holding public ssl certificate for mail . The mail server doesnt have ssl certifcate. Customer wants to eliminate TMG and using palo. Can palo hold the cert to authenticate the ssl . Mail server sits behind the palo in trust zone. So customer will login to https://customer_mail.com. which has public of the palo. Palo holds the cert for this domain,authenticates so customer doesnt get invalid cert . public ip is mapped to internal mail server.
... View more
11-22-2017
04:13 PM
Do you apply security profile ( AV,anti-spy, etc) to the ipsec policies as well. This traffic is encrypted.
... View more
09-03-2017
11:23 PM
PA-3020 running 7.1.11. I am learning 192.168.177.0 route via ospf and also via bgp. But I want to prefer ospf route over bgp. Is it possible to this.
... View more
08-30-2017
01:55 AM
I have 2x3020 running panos-8.0.4. It does bgp with 2 cisco routers running mp-bgp. when running 8.0.4 and mp-bgp enabled or disabled the bgp peering flaps every around 144 sec. I suspended 1 fw and downgraded other to 7.1.11 making it active. since 7.1.x doesnt support mp-bgp bgp establishes and is stable. cisco routers have mp-bgp enabled and cant be disabled.
... View more
06-27-2017
06:00 PM
Polling is working as i can poll 10 tunnels. But for eth1/1 and 1/2 i dont see any traffic. sh interface from cli shows no traffic on physical as its all virtual. Physical port counters read from MAC: -------------------------------------------------------------------------------- rx-broadcast 0 rx-bytes 0 rx-multicast 0 rx-unicast 0 tx-broadcast 0 tx-bytes 0 tx-multicast 0 tx-unicast 0 -------------------------------------------------------------------------------- Hardware interface counters read from CPU: -------------------------------------------------------------------------------- bytes received 14896722045 bytes transmitted 32155374545 packets received 35739542 packets transmitted 35425658 receive incoming errors 0 receive discarded 0 receive errors 0 packets dropped 0 -------------------------------------------------------------------------------- Logical interface counters read from CPU: -------------------------------------------------------------------------------- bytes received 14896722045 bytes transmitted 32155374545 packets received 35739542 packets transmitted 35425658 receive errors 0 packets dropped 1746991 packets dropped by flow state check 3333
... View more
06-26-2017
06:36 PM
I can poll PA200 via prtg(network mgmt) but am not able to poll PA- VM firewall via same.
... View more
05-07-2017
05:09 PM
I need to block webbrowsing but allow other apps which has web dependency. Trust to untrust - all allowed. But when I deny webbrowsing from trust to untrust other apps like skype stops working. Requirement is only web-proxy ip is allowed webbrowsing from trust to untrust. How do we overcome this issue.
... View more
04-16-2017
08:25 PM
2017-04-17 13:14:05.384 +1000 client dagger reported op command was SUCCESSFUL 2017-04-17 13:15:00.588 +1000 Checking to purge appstatdb logtype 2017-04-17 13:17:22.007 +1000 Error: pan_cfg_engine_take_rwlock(pan_cfg_engine.c:675): CONFIG_LOCK: read lock TIMEDOUT for cmd: clear_job, req: <request cmd="op" cookie="1538422974869041" uid="502"><operations><clear><job><id>135</id></job></clear></operations></request> 2017-04-17 13:19:57.717 +1000 dnscfgmod: FQDN Refresh: Periodic TTL Expiry Refresh 2017-04-17 13:19:57.718 +1000 dnscfgmod: Main refresh function: (TTL Expiry) 2017-04-17 13:19:57.718 +1000 dnscfgmod: No fqdns used in this config. Skip config push to device 2017-04-17 13:22:24.334 +1000 Getting authorization info for user inderjit succeeded. 2017-04-17 13:22:54.007 +1000 Error: pan_cfg_engine_take_rwlock(pan_cfg_engine.c:675): CONFIG_LOCK: read lock TIMEDOUT for cmd: get_motd_info_from_candidate_config, req: <auth-request username="inderjit" pid="30305" passwd="" ip-address="192.168.1.22"></auth-request> 2017-04-17 13:22:54.008 +1000 Error: _cfg_get_motd(pan_cfg_auth_handler.c:354): Timed out while getting config lock 2017-04-17 13:23:24.017 +1000 Error: pan_cfg_engine_take_rwlock(pan_cfg_engine.c:675): CONFIG_LOCK: read lock TIMEDOUT for cmd: show_system_setting_multivsys_handler, req: <request cmd="op" cookie="5961361060393522"><operations><show><system><setting><multi-vsys></multi-vsys></setting></system></show></operations></request>
... View more
04-12-2017
03:03 AM
I have job stuck in queue . Tried clearing job,restart mgmt getting same error. Server error : Timed out while getting config lock. Please try again.
... View more
04-06-2017
06:19 PM
Trying to establish ipsec tunnel comes up and then disconnects after above msg. Other side has roming sim in the 4g router. What does db and act means. I have tried enabling NAT-T on my side but didnt help.
... View more
04-02-2017
02:27 PM
Since there are no physical interface on VM PA. So it doesn't show any data under sh interface command. How can you poll these interfaces.
... View more
04-01-2017
08:26 PM
PA-3020 ,7.1.8. PA has 3 tunnels with 3 sites. Site1 - PA200 on other side tunnel traffic fine. ping from site1 to subnet behind Pa3020 works with 1472 mtu and fails after that. Site2- Tried to migrated from ssg140 to PA-3020,other side Cisco 871. Traffic from PA-3020 to Site2 works fine. But from Site2 to PA3020 can only ping. rdp,mail,port 80 traffic not working. ping from site2 to subnet behind pa3020 works with 1394 mtu and fails with mtu above that. Site3-Same issue as Site2 ,but mail worked. rdp,port 80 traffic not working. ping from site 3 to subnet behind pa3020 works with 1410 mtu and fails with mtu above that. PA3020 traffic logs shows just minimal byte traffic compared to working tunnel where after initial tcp handshake traffic flows. Also packet capture shows retransmissions. ssg140 has set flow tcp-mss. All the tunnels have 1500 MTU size with no mss setup.
... View more
03-29-2017
02:52 AM
I have migrated tunnel which is working in the same setup. Its not a routing but mtu or mss adjust setup. On netscreen I have set flow tcp-mss does that mean i will need to enable adjust mss on external interface.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-27-2020
05:50 AM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
