About tac.in

tac.in · ‎01-03-2019

Hi, had a requirement of allowing specific channel in youtube. Follwed this document https://live.paloaltonetworks.com/t5/MineMeld-Articles/Using-MineMeld-to-filter-YouTube-videos-to-only-approved/ta-p/164928 and everything was working as expected . Now it stopped working , hope youtube has changed its way of working . It is using part of video URL as refereal header. I am unable to view these kind of URL (youtube.com/watch?v=WpW7IGOQbA4) in URL filtering logs. Let me know anyone has made a tweak to make it work. Thanks, Ram

tac.in · ‎08-27-2018

hi , I hope you could replace the serial number of VM . ( trial serial no to Purchased serial number ). https://live.paloaltonetworks.com/t5/Learning-Articles/How-to-change-a-VM-Panorama-serial-number/ta-p/189242 same way you can do it for VM firewall also, I guess.

tac.in · ‎07-03-2018

Hi Shabeeb, Please try changing service from application-defaults to any. The tunnel might be on other ports other than default ports .

tac.in · ‎06-29-2018

Hi James , Create a PBF policy for VLAN 30 to route through ISP2 and monitor unchecked. Regards, Ram

tac.in · ‎11-20-2017

@BPry Mainly we want to do it for all the news channel web sites such as www.ndtv.com , www.bbc.com etc... Regards

tac.in · ‎11-20-2017

@BPry Mainly we want to do it for all the news channel web sites such as www.ndtv.com , www.bbc.com etc... Regards

tac.in · ‎11-19-2017

Hi All , Can any one please confirm , can we able to block videos streaming inside a website and allowing the access to the site with palo alto.? Tried to create a decryption for the traffic and also blocked video streaming but it didn't helped. Please help. Regards

tac.in · ‎07-31-2017

Hi Team, Please let us know whether Palo Alto firewall has updated signatures to detect Houdini RAT Thanks and Regards, TAC

tac.in · ‎06-15-2017

Hello Remo Thanks for your response. 1. Yes we have installed certificate on Android device.(except outlook every application working fine) 2. On IOS device nothing is working via decryption. Thanks

tac.in · ‎06-12-2017

Hello All, Need help 1. Decryption is not working in IOS device 2. Outlook is not working in Android via decryption

tac.in · ‎05-31-2017

Kindly help to know the current stable version for Global Protect

tac.in · ‎05-22-2017

Hello Anyone have solution for blocking internet download manager application accessing through firewall. Thanks pallavi

tac.in · ‎05-15-2017

if u block the URL will be blocked ( but resolve to an IP address) sinkhole - will resolve to the specified address.

tac.in · ‎05-15-2017

Hi Simsim, If the malicious URL is resolved in to an ipaddress , session might be created and your public IP might get blacklisted

tac.in · ‎04-25-2017

Hi Javith, Proxies can be completely blocked only by decrypting SSL traffic . Please refer the below articles to enable decryption. https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Implement-and-Test-SSL-Decryption/ta-p/59719 https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-SSL-Decryption/ta-p/65073 Thanks, Ram

tac.in · ‎09-24-2015

Status is showing Host Unreachable PANOS 6.0.9

tac.in · ‎09-24-2015

We are facing an issue as while integrating agentless user id integration. AD is pingable from management as well trust interface but in the Server monitoring TAB the status is showing

tac.in · ‎03-16-2015

Hello All, We would like to know whether the Fortigate Cloud Firewall running on FortiOS Version 5 is supported by PA for IPsec VPN as we are getting below error and tunnel is not coming up. 2015-03-17 10:53:28 [DEBUG]: vendorid.c:274:check_vendorid(): received unknown Vendor ID à Other End device is a Fortigate Cloud Firewall running on FortiOS Version 5. Is this supported by Palo Alto ? 2015-03-17 10:53:28 [DEBUG]: ipsec_doi.c:283:get_ph1approval(): an acceptable proposal found. 2015-03-17 10:53:28 [DEBUG]: ikev1.c:1672:isakmp_ph1resend(): resend phase1 packet 24871bfed0152c7e:faab2d4faea77d3f 2015-03-17 10:53:34 [INFO]: ikev1.c:318:ikev1_main(): the packet is retransmitted by 40.132.56.196[500] 2015-03-17 10:53:46 [DEBUG]: ikev1.c:1672:isakmp_ph1resend(): resend phase1 packet 24871bfed0152c7e:faab2d4faea77d3f 2015-03-17 10:53:49 [PROTO_NOTIFY]: ikev1.c:2423:log_ph1negofailed(): ====> PHASE-1 NEGOTIATION FAILED AS RESPONDER, MAIN MODE <==== ====> Failed SA: 117.239.143.210[500]-40.132.56.196[500] cookie:0f9f6a98fdcb36ec:807e1f8d23119dee <==== Due to timeout. 2015-03-17 10:53:49 [INFO]: ikev1.c:2471:log_ph1deleted(): ====> PHASE-1 SA DELETED <==== ====> Deleted SA: 117.239.143.210[500]-40.132.56.196[500] cookie:0f9f6a98fdcb36ec:807e1f8d23119dee <==== Thanks.

tac.in · ‎03-16-2015

Hello All, I have the below queries. 1) How configure 'TRACK' in Static Route (want to monitor the Gateway, As soon as current Gateway is fail immediately traffic will move to another Gateway) 2) How to configure multiple Peer Gateway in a single IPSEC Site to Site VPN( Diagram attached here with) 3)How to add multiple Remote subnet in Proxy IDs in IPSEC Tunnel Configuration. Thanks

tac.in · ‎02-25-2015

PANOS : 5.0.11 Dynamic updates version: Application version 487-2581 (02/17/15) Threat version 487-2581 (02/17/15) Antivirus version 1493-1968 (02/24/15 Customer's query is that whether the signatures include Kaspersky’s Botnet C&C URLs feeds .

tac.in · ‎02-09-2015

Thanks for the quick update.

tac.in · ‎02-09-2015

Thank you and wants to know does any PA models support up-gradation of number of SSL VPN by using license.

tac.in · ‎02-09-2015

Hello All, Need your help in understanding Global Protect license. Customer has PA-500 and it supports only 100 SSL VPN connections. Is it possible to upgrade the number of SSL VPNs to above 100,200 upto 500 by procuring GP license. Thanks.

tac.in · ‎02-09-2015

Hi All, Please suggest me on how to advertise networks in BGP. Thanks,

tac.in · ‎02-05-2015

Thanks for the reply. I have already checked the other parameters and found it to be OK. Query is the used memory seems to be quite high.Will it affect the performance later? >show system resources follow top - 15:21:38 up 18 days, 3:54, 2 users, load average: 0.01, 0.01, 0.00 Tasks: 120 total, 1 running, 115 sleeping, 0 stopped, 4 zombie Cpu(s): 0.8%us, 0.3%sy, 0.2%ni, 98.5%id, 0.0%wa, 0.0%hi, 0.1%si, 0.0%st Mem: 3850944k total, 3737368k used, 113576k free, 61696k buffers Swap: 2008084k total, 6128k used, 2001956k free, 2065752k cached Regards

tac.in · ‎02-05-2015

The device model is 3020. From the output of >show system resources, we have found that the memory usage is 3781100k Is it alarming high memory usage?

tac.in · ‎01-27-2015

Thanks I also got the same details from the Threat vault.

tac.in · ‎01-27-2015

Hello Hulk Thanks for the reply. The threat IDs that you have mentioned, Is it related to the vulnerability CVE-2015-0311? It would be good if you can provide some more details on the three TID.

tac.in · ‎01-27-2015

Model# of the device: PA-5020 Serial# of the device: 0011C103358 Current PANOS version: 5.0.4 Customer requires information that whether CVE-2015-0310 will have an impact on the PANOS version or not and if yes then is there any patch available? An exploit for CVE-2015-0310 exists in the wild, which is being used in attacks against older versions of Flash Player.

tac.in · ‎01-13-2015

Receiving following error while commit. No Global Protect Portal license Vsys1 portal "GP-Portal-Essilor" config "GP-Client-Config" modify gateways cutoff time will not take effect. Configuring committed successfully. Customer does not have GP license as Single portal and gateway access GlobalProtect does not require GP license. Please inform what could be the reason of such error ? It was working till around 20th Dec 2014 without any issues and after that it stopped working.

Date Registered	‎06-01-2012 02:37 AM
Date Last Visited	7 hours ago
Total Messages Posted	54
Total Likes Received	2

Online Status	Offline
Date Last Visited	7 hours ago

Strata

Prisma

Cortex

About tac.in