This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About DaveM
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About DaveM
05-16-2018
9Posts
0Likes
1Solution
May 16, 2018Last Visited
User
Activity
User
Profile
Latest posts by DaveM
| Subject | Views | Posted |
|---|---|---|
| 5638 | 02-05-2013 09:22 AM | |
| 5770 | 02-05-2013 06:51 AM | |
| 3769 | 12-27-2012 06:45 AM | |
| 3942 | 12-17-2012 07:35 AM | |
| 3941 | 12-14-2012 03:31 AM | |
| 4083 | 12-13-2012 03:39 AM | |
| 7071 | 11-29-2012 05:09 AM | |
| 2142 | 11-22-2012 02:05 AM | |
| 2373 | 11-21-2012 07:58 AM |
User Badges
Community Statistics
| Member Since | 04-02-2012 04:58 AM |
| Date Last Visited | 05-16-2018 12:07 PM |
| Posts | 9 |
02-05-2013
09:22 AM
I've got two dedicated pan-agent servers - I've also upgraded these to the latest version - made no difference.
... View more
02-05-2013
06:51 AM
I have the same problem with 5.0.2 (I have a open support ticket) I'm seeing 100% on my PA2020 and PA500 and about 50% on the PA200's Regards Dave PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 2356 20 0 230m 100m 64m S 196 10.3 22515:04 useridd 26227 30 10 57904 13m 4236 R 5 1.4 0:00.38 pan_logdb_index 26249 20 0 4468 1032 800 R 5 0.1 0:00.06 top 2132 15 -5 54168 14m 1292 S 4 1.5 217:52.36 sysd 2134 0 -20 32228 5916 1188 S 4 0.6 38:32.82 masterd_manager 1 20 0 1836 560 536 S 0 0.1 0:02.42 init 2 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd 3 RT 0 0 0 0 S 0 0.0 0:02.09 migration/0 4 20 0 0 0 0 S 0 0.0 0:00.15 ksoftirqd/0
... View more
12-27-2012
06:45 AM
It actually looks like from 1.2 onwards the HIP check for the Domain no longer looks at the Host Domain of the PC you are connecting from but the Domain of the user authenticating with the global protect client. We where using this to restrict users with non company devices but with a domain account to specific applications, IP ranges etc. - This change has unfortunately broken this functionality for us.
... View more
12-14-2012
03:31 AM
I seem to be getting odd results with the firewall rule - it seems a bit hit and miss but certainly not consistent, I'm seeing some users hit rules further down the rule base rather than get matched by the rule with the HIP check. The HIP match rule on the gateway which uses the same HIP profile is displaying the not matched message for all my users who are on the 1.2 client.
... View more
12-13-2012
03:39 AM
Hi, Has anyone seen any problems with GP 1.2 and HIPS, particularly the domain check? Since upgrading to 1.2 the HIPS check we have to determine if the PC is a member of specific domains fails. When we look at the client on a PC (running windows 7) it no longer shows the domain under the host info section? It still shows the OS and Host Name as well as AV, NIC's etc but nothing about the domain. Thanks Dave
... View more
11-29-2012
05:09 AM
I've had exactly the same problem - I worked through it with Palo support and we discovered we had to put the netbios domain name back in the LDAP query (the one we had to remove in 4.1.8) and then the group name had to be in the format domain\groupname rather than the full LDAP path. I also had spaces in the OU name for the account I was doing the LDAP lookup with and found we had to move this to a OU without a space in.
... View more
11-21-2012
07:58 AM
Has anyone seen any issues with cacti and 5.0? Ours where all logging usage perfectly until the upgrade it which point they stopped. Now we just get SNMP errors as though the devices are down. Regards Dave
... View more
Labels:
- Labels:
-
Configuration
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-16-2018
12:07 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks