LIVEcommunity - About tormodhope

tormodhope · ‎09-20-2016

EDIT: Wait.. Let me read the post from glastra1 first! 🙂 I did remove application-default from the interface after some trouble yesterday, that have probably fixed it then.. Weird, as application is "any".. It should have let Panorama thought?

tormodhope · ‎09-19-2016

I upgraded a PA200 from 7.0.5 to 7.1.3 on friday. After the upgrade, the box show a MGT CPU load average on >80% and is not able to connect to Panorama anymore. The box is rebooted twice adter upgrade to try to fix this. Anyone know a fix?

tormodhope · ‎07-29-2014

It there a way to allow Spotify to authenticate, but disallow streaming (both from web and apps?) As-is there are only one AppID for Spotify, and this blocks everything. Users having the app in offline mode has go go online every 30 day to regain new 30 days of offline use, and i think an authetication is enough. Anyone else having problems with this?

tormodhope · ‎04-10-2014

That describes the LDAP way, and this is the way i have testet the most. The reason for connecting to a domain is to authenticate users for GlobalProtect, and to give access to different resources from domain groups.

tormodhope · ‎04-09-2014

What is the recommended way to connect a PA box to a windows domain? I see know there is a radius way of doing it, and i know this is the way other like to configure it. But there is alot more work configuring, and reconfiguring if i want to change/add any groups or access. Is there a reason we should not use Kerberos or LDAP?

tormodhope · ‎02-10-2014

Since im not home now, i cant confirm, but yes, i might have to rule setup with source any, and not pined down to my trust zones. This is bad practice, i know. But is that the problem? I'll doublecheck when i get home. The rule might be like this one, with source any.

tormodhope · ‎02-10-2014

Thanks! I'll try that later today. I got ping working if i add a roule thats like this: 0.0.0.0/0 is just there to mas my origin public ip. The other rule is gone, as this is a test box at work.

tormodhope · ‎02-10-2014

I dont NAT anything from untrust to trust, i only have a overload nat from trust to untrust. But it seams that it blocks everything, including ping, and https (thats why the GP wont connect).

tormodhope · ‎02-05-2014

I got it working with a DNAT against the outside ip address. But is this needed? Is there another way doing it? The IP is public and facing internet, i though a management profile would open anyway.

tormodhope · ‎02-05-2014

I have a PA200, and is using eth1 for outside (internet) and eth2 for inside. I'm NATing from eth2 to eth1, as normal. Now i want to have the management https address on the eth1 for several reasons. At home its just for testing, but at my office i have PA200 between subnets that is duplicate, and not nessesary to route to. When i use a management profile with access to ping and https on eth1, it wont't work. I suspect the NAT rule has something to do with it. Cause when i set it up in my lab with no NAT, it works. Any tips for me please?

Member Since	‎02-05-2014 11:26 AM
Date Last Visited	‎10-29-2019 04:12 AM
Posts	12

Online Status	Offline
Date Last Visited	‎10-29-2019 04:12 AM

Re: Failed to establish SSL connection to Panorama Server

Failed to establish SSL connection to Panorama Server

Allow Spotify authentication, but not streaming

Re: Best or recommended way to connect PA to Windows Domain

Best or recommended way to connect PA to Windows Domain

Re: Failed to establish SSL connection to Panorama Server

Failed to establish SSL connection to Panorama Server

Allow Spotify authentication, but not streaming

Re: Best or recommended way to connect PA to Windows Domain

Best or recommended way to connect PA to Windows Domain

Re: GlobalProtect with NATet interface

Re: GlobalProtect with NATet interface

Re: GlobalProtect with NATet interface

Re: GlobalProtect with NATet interface

GlobalProtect with NATet interface

Network Security

Cloud Security

Security Operations