Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About glastra1
About glastra1
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Thursday
69Posts
21Likes
20Solutions
Apr 08, 2021Last Visited
User
Activity
User
Profile
Latest posts by glastra1
| Subject | Views | Posted |
|---|---|---|
| 1255 | 08-13-2018 11:39 AM | |
| 905 | 12-05-2017 06:04 PM | |
| 734 | 03-15-2017 12:29 PM | |
| 1495 | 03-13-2017 08:47 AM | |
| 661 | 03-09-2017 09:33 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 12-05-2017 06:04 PM | |
| 1 | 03-13-2017 08:47 AM | |
| 1 | 02-08-2017 01:12 PM | |
| 1 | 01-26-2017 08:26 PM | |
| 1 | 01-26-2017 08:29 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 2 | |||
| 3 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 07-31-2015 01:50 PM |
| Date Last Visited | Thursday |
| Total Messages Posted | 110 |
| Total Likes Received | 21 |
08-13-2018
11:39 AM
I don't see checkpoint viewer in expedition, has it been removed for any reason?
MT 3.1,
Expedition,
... View more
12-05-2017
06:04 PM
1 Kudo
this could be your issue, https://live.paloaltonetworks.com/t5/Management-Articles/Local-interface-reference-removed-when-Force-Template-Values/ta-p/166664 Regards, Gerardo.
... View more
03-15-2017
12:29 PM
Enable troubleshooting on the global protect client. More information would be helpful.. Have you configured a global protect gateway? is it FQDN/IP? Has the global protect gateway an IP pool? Is the agent gateway configuration enabled for all the users or just for an specific group? Is the computer NIC in the same network as the IP pool? regards, Gerardo.
... View more
- Tags:
- ve you
03-13-2017
08:47 AM
1 Kudo
Per the description sounds like a buffer depletion, I just checked the release notes and there are a couple of fixes on that but I'd recommend you to collect a tech support and open a TAC case to get the right diagnostic. regards, Gerardo.
... View more
03-09-2017
09:33 AM
Try rebooting the firewall. At the top of my head the inferfaces on virtual firewalls are detected at boot time, so if those were added to openstack after you turned on the firewall that may be the issue. regards, Gerardo.
... View more
02-20-2017
09:01 PM
Firewall or panorama? PAN-OS version? do you have an snippet of your code or the way you're adding it. Regards, Gerardo.
... View more
02-08-2017
01:12 PM
1 Kudo
Yes, that's expected behavior shorther prefix lenghts will take over. Admin distance will only matter when you have the same route (including prefix lenght) coming from different routing protocols (static, ospf, bgp...). In adittion OSPF is an internal gateway protocol so is asummed that the the routes are coming from controled sources (where only the requiered routes are advertised), the only options left are changing to BGP (EGP) or configure static routes using the same prefix lenght. As side note to check the installed routes in the dataplane you can use the following command, >show routing fib regards, Gerardo.
... View more
02-02-2017
11:58 AM
not at the top of my head but you can rely on third party authentication like radius, LDAP or kerberos so the users can change their passwords on those systems or use the same password as in their domain computers (which you don't know) https://www.paloaltonetworks.com/documentation/62/globalprotect/globalprotect-admin-guide/set-up-the-globalprotect-infrastructure/set-up-external-authentication regards, Gerardo.
... View more
01-26-2017
08:29 PM
1 Kudo
You won't be able to configure duplicated IPs (the commit will fail) even if they are in different vsys but you can configure them in the same network segment. For example 10.1.1.1/24 in VR1 and 10.1.1.2/24 in VR2. Regards, Gerardo.
... View more
01-26-2017
08:26 PM
1 Kudo
That should be a feature requests. As workaround you may want to use BGP or create static routes with less admin distance. Regards, Gerardo.
... View more
01-26-2017
08:24 PM
Use Global Protect 🙂 regards, Gerardo
... View more
01-05-2017
05:34 AM
It could also be sending attribute number 2, anyway make sure is sending the right attribute depending on your needs and run packet captures just to double check. https://live.paloaltonetworks.com/t5/Configuration-Articles/RADIUS-Vendor-Specific-Attributes-VSA/ta-p/60273 There are 5 attributes: PaloAlto-Admin-Role: Attribute #1 - This can either be a default admin role name or a custom admin role name. PaloAlto-Admin-Access-Domain: Attribute #2 - This is used when a Palo Alto Networks device has multiple vsys. This is the name of an Access Domain as created under Device > Access Domains. PaloAlto-User-Group: Attribute #5 - This is the name of a group to be used in an Authentication Profile. regards, Gerardo.
... View more
01-04-2017
10:55 AM
Looks like the radius server is sending radius attribute #4 (for access domains) instead of number #3 (for predefined roles). According to your logs the role is blank but the access domain (ADO) is "superuser" (predefined role) access domain = superuser
Found userinfo (name/role/ado) cache entry: adm-admin//superuser
Sent authorization response for user "adm-admin": role/domain="/superuser" https://live.paloaltonetworks.com/t5/Configuration-Articles/RADIUS-Vendor-Specific-Attributes-VSA/ta-p/60273 PaloAlto-Panorama-Admin-Role: Attribute #3 - This can either be a default admin role name or a custom admin role name on Panorama. PaloAlto-Panorama-Admin-Access-Domain: Attribute #4 - This is the name of an Access Domain configured on Panorama as created under Panorama > Access Domains. If you want to configure admins with access domains you can follow the next guide, https://live.paloaltonetworks.com/t5/Management-Articles/Separate-Panorama-Admins-Access-Domains-using-RADIUS/ta-p/54432 You can place a packet capture to analyze the radius responses at the top of my head they should be on clear text, https://live.paloaltonetworks.com/t5/Management-Articles/How-To-Packet-Capture-tcpdump-On-Management-Interface/ta-p/55415 https://live.paloaltonetworks.com/t5/Management-Articles/Tcpdump-Packet-Capture-Truncated/ta-p/63047
... View more
01-03-2017
01:43 PM
2 Kudos
Global protect satellite doesn't provide redundancy. PBF or dynamic routing do. Since you'll have 2 links: MPLS and VPN, you can simply configure PBF to use your primary link (MPLS) which be failing over to your VPN (static route) in case it fails https://live.paloaltonetworks.com/t5/Management-Articles/Selecting-an-IP-Address-for-PBF-or-Tunnel-Monitoring/ta-p/61993 Regards, Gerardo.
... View more
01-03-2017
01:34 PM
Try checking your GP portal SSL protocols supported with a different tool (like the one in the link) if it's still showing up as tlsv1.0 open a TAC case. https://www.ssllabs.com/ssltest/
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
Thursday
|
Likes From
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
