Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About ITSama
About ITSama
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
04-08-2020
15Posts
1Like
0Solutions
Apr 08, 2020Last Visited
User
Activity
User
Profile
Latest posts by ITSama
| Subject | Views | Posted |
|---|---|---|
| 184 | 09-03-2015 12:38 AM | |
| 237 | 08-26-2015 04:31 AM | |
| 461 | 02-12-2015 12:23 AM | |
| 508 | 02-03-2015 02:04 AM | |
| 446 | 07-30-2014 12:31 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 02-12-2015 12:23 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 03-09-2014 11:30 PM |
| Date Last Visited | 04-08-2020 01:51 AM |
| Total Messages Posted | 15 |
| Total Likes Received | 1 |
09-03-2015
12:38 AM
I opened a support-ticket. It seems to be a bug in PAN OS 7.0.1. Waiting for answer from support.
... View more
08-26-2015
04:31 AM
It seems that the cli command "set system setting ssl-decrypt skip-ssl-decrypt yes" doesn't work on PAN-OS 7.0.1. The decryption wouldn't temporarily disabled, nothing happens!? Has anyone the same problem?
... View more
02-12-2015
12:23 AM
1 Kudo
Hello Hulk, after fruther investigation, I opened a ticket. The answer from the support is that that jar-file includes 2 windows dll-files, which are categorized as PE-Files :smileylaugh:. Thx
... View more
02-03-2015
02:04 AM
Hello together, i have the problem that a jar-file would be blocked and categorized as a "Microsoft PE File". The PE Files are blocked by a "File Blocking Profile", thats okay, but jar files actually not blocked in that profile??? And i think this jar file shouldn't categorized as a PE File??? Perhaps somebody has similar problems. Any suggestions?? Thanks in advance
... View more
Labels:
07-30-2014
12:31 AM
Hi hshah, the URL is www.dhl-geschaeftskundenportal.de. I checked it now with a Firefox portable and it works with it, however now i found out that it also works on some other Clients with IE? Regards
... View more
07-30-2014
12:24 AM
Hello Hulk, thx for the "Exclude-List", that's good to know, but can you explain me how I can exclude a special application from the decryption-policy? I know how to exclude IP or URL categories, but not applications? Regards
... View more
07-29-2014
05:34 AM
Hi, since a few days, we have more and more websites, which we are unable to login. After further investigation i'm sure there's something wrong with SSL-decryption, if I exclude the IP from encryption the sites work. But formerly the problem doesn't exist and nothing changed. Could it be a problem with different TLS versions in the IE?
... View more
07-29-2014
02:43 AM
Hi sjamaluddin, I didn't use the ID-agent, I use the internal agent on the paloalto, so I don't know where to look for the ignore-list, if it's possible, but now I understand the problem. Really good explanation .
... View more
07-25-2014
08:53 AM
Hi hshah, I know that, the problem is that i doesn't become a "user to IP mapping". For example, if i logon on a domaincontroller with the domain administrator, i will get the captive portal. If i logon with a user which is a member of the domain administators group, i become a "user to IP mapping". And what i find really strange is that on some servers/clients it isn't a problem with the domain-admin account. I use for "server monitoring" (domaincontroller, eventtracking) the domain-admin-account, should I use a special account for that? Regards
... View more
07-24-2014
11:39 PM
Has anybody an idea, why the Active-Directory authentication works from every location in our company with every domain-user, but if I use the Domain-Administrator-Account I always forced to use the login credentials with Captive-Portal??
... View more
04-28-2014
01:49 AM
hi again, okay i will test the OCSP with the new PAN-OS Version soon, but now I have another problem with the selfsigned certificate for the untrusted Certificates, because I get many certificate errors because the most intermediate CA's are not in the default trusted certificate list on the PA. So what is the best way to solve the problem. It seems to be a little bit difficult to import all possible certificates for the Sub-CA's??
... View more
04-24-2014
07:02 AM
Okay :smileygrin:. I have tested it and it looks good with the untrusted certificates. And for the "security feature" in FF, i will look for a workaround . But I have one more question: Do you mean it's useful to work with OCSP-Responder or CRL-Lists? Any Ideas or best practice, because there are different meanings about that?
... View more
04-24-2014
05:22 AM
"Do not use a trusted certificate with the option "forward trusted certificate".
Sorry I didn't really understand. You mean "Do not use a trusted certificate with the option "forward untrusted certificate"?
... View more
04-24-2014
04:06 AM
Hi Hithead, i had only one certificate for all purposes signed as a Subordinate-CA from my Organisation-CA??? IE has no problems with that, only FF.
... View more
04-23-2014
10:42 PM
After turning on the SSL-Decryption, firefox tells me every moring after restart this error "sec_error_reused_issuer_and_serial", after deleleting the whole history and a restart of firefox it works, but that workaround every morning couldn't be the solution. Anybody some suggestions?? thx
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
