About hmcadmin

Hello,    i have been messing about with GP in combination with Android 9. I've imported the certificate setup the right decryption rules and exclusions etc. and things seem to working. When i check the certificate using Chrome i can confirm it is using ssl decryption i also see the traffic on our firewall. Onfortunately a lot of application are not working. I've got the google play store excluded from ssl decryption already and that seems to be working fine, but still a lot of applications are not ok with the ssl decryption so it seems. My Ssl decryption setup using a laptop is working fine btw.    Is this normal on androids? is android working with more cert stores ? there something i can do to make this work without excluding all these applications?   Another thing i came across is that the network exclusion for my local private network is not working, i see the request coming in on the firewall. When testing this config on my laptop win 10, it is working... is this by design?   thanks guys.    regards, Lennart     ... View more

Hello,    as a safety measure i placed my workstation in a different vlan and from there i'm managing our network and servers which are located in the designated dedicated vlans.    On the firewall we have a rule which makes it possible for our 'admin' accounts to access most vlans for management tasks.    Now when i use runas for certain management tools and use my admin credentials the runas command takes over the AD account and from thereon the firewall binds my ip to my admin account and so all traffic goes over the 'admin firewall rules' which is not optimal obviously.    I've came accross the 'runas /netonly' option which is perfect for remote management but i'm running into problems with this trick.    As soon as i use this for MMC modules for example dsa.msc it seems the firewall again binds the admin account to my ip address..  If i use runas /netonly for different application it doesn't.    is there any workaround for this phenomena?    thanks! ... View more

hello, In the near feature we will upgrading to version 4.1 on our pa500 and after the upgrade we will be using the global protect feature for our remote access. At this point our users are connecting to the portal and logon using netconnect and then after connection is establishised they need to run mstsc for the rdp access to our TS server. I was wondering if it would be possible to somehow add an extra link/download on the portal link so we can offer an pre-configured rdp config to our users. With other vpn clients its possible to add a run once command but that's not possible with netconnect or the global protect agent, the extra steps make it a pretty ugly solution at this point. any ideas? thanks SL ... View more

Hello, at the moment we are blocking all MSN activities on our LAN, or, atleast i thought so. When users logon to hotmail en start the web msn from within hotmail, msn still works. i made sure we blocked all msn related applications, but still MSN from within hotmail works. I thought application-id was so smart that it could filter out all MSN traffic..? thanks L ... View more