About OCDBE

Hi, can anyone confirm this is not supported yet with Panorama ?: I would like to create reports based on user groups with Panorama. I know you can achieve this with a single unit , but i don't think this will work with Panorama. We are even not able to select user/groups within security policies with the Panorama context. Best Regards, Bart  ... View more

Hello We are having some complaints with the deployment of multiple Palo Alto Agents. We have 3 remote sites in 1 DOMAIN which are connected with a slow vpn connection. Each remote site has his own Domain controller Since we have a slow connection ,we made the choice to deploy an agent for each site. Each agent is only pointing to the local domain controller . The Palo Alto Device ( located at the main site ) is pointing to all agents. the issue is that some user mappings are not recognized by the PA , but they are listed on the agent. Question about this: We thought the Palo Alto is demanding all configured Agents for the same domain to resolve an ip-address to a username , but it seems like the Palo Alto device is only demanding the active agent ( * ) ( show user pan-agent statistics ) Is there anyone who can confirm this ? If the Palo Alto agent will only demand the active agent , how can we workaround this issue ? ( if we define each DC's on the remote agents, we got to much traffic load on the vpn connections. ) Thanks ! ... View more

Hello, please check the attached document. It seems like users identified by NTLM are not automatically overwritten as soon as another domain users logs into the system ?? Is this a bug ? It's working fine for multiple AD users who are working on the same system ,but NOT if an "NTLM identified user" logs off and an AD users logs into the system. Thanks ! Bart ... View more

Hello, for some reason we ( and many other customers ) are still experiencing issues regarding the use of ldap groups in an authenticatin profile for example SSL VPN. We have microsoft AD as LDAP server and we went through every step in the well known following document ( eDirectory and LDAP authentication in PANOS 3 1 3.pdf) When we specify a single LDAP user in our authentication profile , we are able to authenticate with that user , but members of LDAP groups are not working as it should be. I made a pdf document with printscreens of our configuration ( pdf document attached ). As you can see in the document , the PA is able to read the members of the group. Please anyone who has good advice for us ( and many other customers ) to make this work ? thanks alot ! Securelink support ! ... View more

Anyone who can tell if the panorama has the functionality to create rules between zones or is has at least the ability to define network objects ? Now were only able to define rules between the zones ANY. Is there any support like polymorphic objects ? Greetz. ... View more

Hi, anyone knows how i can make my custom url category visible when i attempt to add a filter with the function Manage custom reports. Now i only see the default url categories when i attempt to to add a custom url filter. However under ACC and the Monitor tab i can use the custom url categories as a filter... ... View more