Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- ›
- About gtomte
About gtomte
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
05-10-2017
26Posts
9Likes
3Solutions
May 10, 2017Last Visited
User
Activity
User
Profile
Latest posts by gtomte
| Subject | Views | Posted |
|---|---|---|
| 1341 | 03-13-2017 07:42 AM | |
| 1367 | 03-13-2017 03:30 AM | |
| 5604 | 03-09-2017 02:10 AM | |
| 5314 | 03-08-2017 03:21 AM | |
| 1225 | 03-08-2017 03:10 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 03-09-2017 02:10 AM | |
| 1 | 03-07-2017 09:35 AM | |
| 2 | 10-13-2016 09:55 AM | |
| 1 | 12-30-2015 01:59 AM | |
| 1 | 12-16-2015 06:53 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 | |||
| 1 | |||
| 2 |
User Badges
Public Statistics
| Date Registered | 03-19-2012 06:16 AM |
| Date Last Visited | 05-10-2017 10:33 AM |
| Total Messages Posted | 81 |
| Total Likes Received | 9 |
03-13-2017
03:30 AM
Anyone else seen this? All service routes are the same. File upload to WildFire works fine. Nothing blocked in the traffic logs.
... View more
03-08-2017
03:21 AM
Hi there. Documentation is rather slim here. I've set ut MFA for web site access, and it works. When testing it for non-http, accessing a SSH server, it kills the SSH connects, but no 2FA challenge on my GP. What am I doing wrong? What's needed? I've done this: " Set Enable Inbound Authentication Prompts from MFA Gateways to Yes" https://www.paloaltonetworks.com/documentation/80/globalprotect/globalprotect-admin-guide/authentication/set-up-multi-factor-authentication Nothing on port 4501 in the logs. No pop-up on the GP client.
... View more
- Tags:
- globalprotect
- gp
- mfa
03-08-2017
02:18 AM
Hi there I've played with this feature for a while on my own FW, but must be doing something wrong. I'm adding the log forwarding profile, and when checking the filter I make, I get many log lines. But I don't get any output in the DAG. I've tried with threat and traffic logs. Documentation is rather slim on this topic. Anyone done this with success, that can share with me the details needed to make it work? Thanks
... View more
03-07-2017
09:35 AM
1 Kudo
Does anyone have some document that explain the different categories in Anti-Spyware profiles? They're kind of self explaining, but does anyone have a document similar to the URL category explanation? Thanks
... View more
03-06-2017
09:44 AM
What to type? What format? The doc doesn't say... I'm testing MFA in non-http traffic, and have enabled " Inbound Authentication Prompts from MFA Gateway" But what to type here: In Trusted MFA Gateways, specify the list of authentication gateways a GlobalProtect client will trust for multi-factor authentication. When a GlobalProtect client receives a UDP message on the specified network port, GlobalProtect displays an authentication message only if the UDP prompt comes from a trusted gateway.
... View more
02-26-2017
10:40 AM
This is doable today, by using 802.1q for the two vlans you mention, with subinterfaces. and use the same vlan number for both. In that way, these two vlans are connected. No redirect. No rewrite. But connected together.
... View more
02-26-2017
06:15 AM
The setup you see here, is used for port to App-ID migration. Customer migrating from other firewalls, port based, to Palo Alto Networks, will typically be done with no policy changes as the first step. Then App-ID adoption is the next step. Other customers start from scratch, building an App-ID based ruleset from day 1. Then the 3 policy lines you see will be used. The last rule you could call a "clean up rule". Everything that are to match that rule, are for you to move into one of the two above. Me personally would have moved the known bad to the top. When you've cleaned up things, after verifying for days or weeks, depends on you gut feeling, and when you see close to nothing in the last rule, you could just disable/delete the any rule. Then you've created a Application based White List ruleset. And that's what Palo Alto Networks is all about, bringing back the default action of the firewall, by doing what the intention of the firewall has always been, to control what you allow.
... View more
10-13-2016
09:55 AM
2 Kudos
I use reset-both for pop3 and imap, with no "known" problems. Blocks viruses like a charm... Even after SSL decrypt. This is gmail. THREAT ALERT : medium : 173.194.222.109 -> 192.168.4.164 Trojan-Downloader/VBS.agent.dpiwk(1210797) reset-both type: THREAT subtype: virus app: imap category: web-based-email contenttype: severity: medium direction: server-to-client sport: 993 dport: 49498 natsport: 993 natdport: 36862 flags: 0x81502000 proto: tcp action: reset-both
... View more
08-08-2016
10:03 PM
https://live.paloaltonetworks.com/t5/Configuration-Articles/Custom-App-ID-for-2016-International-Games-in-Rio-de-Janeiro/ta-p/101153
... View more
01-28-2016
09:21 AM
You have to look for traffic towards the sinkhole IP in your traffic log, if it's configured as an IP outside the PC LAN.
... View more
01-26-2016
12:36 PM
@syadav. I know that might help, but it shouldn't be necessary. But it's a last option, and will be tested if nothing else works. It sounds like there is a bug in the images, since 7.0.0 isn't a valid base image anymore.
... View more
01-26-2016
08:34 AM
I have a customer running 6.1.8, have downloaded 7.0.1, and tries to download 7.0.4. Fails the same way. I've asked him to test with 7.0.2 or 7.0.3 to see if there is something wrong with the 7.0.4 image.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-10-2017
10:33 AM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
