Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About pred-martin
About pred-martin
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
06-18-2019
26Posts
0Likes
0Solutions
Jun 18, 2019Last Visited
User
Activity
User
Profile
Latest posts by pred-martin
| Subject | Views | Posted |
|---|---|---|
| 1771 | 06-18-2019 01:53 AM | |
| 1811 | 06-17-2019 04:29 AM | |
| 4305 | 06-06-2018 05:56 AM | |
| 4312 | 06-06-2018 05:26 AM | |
| 1247 | 02-28-2018 02:21 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 4 |
User Badges
Public Statistics
| Date Registered | 03-26-2014 12:45 AM |
| Date Last Visited | 06-18-2019 05:15 AM |
| Total Messages Posted | 28 |
06-18-2019
01:53 AM
webui {
974
webui {
973
monitor {
975
monitor {
974
logs {
976
logs {
975
traffic enable;
977
traffic enable;
976
threat enable; This is what I have for the admin role when doing a config audit. Am I missing something here? The user is not able to get the detailed logs. This is what devconsole is outputting when clicking a spyglass:
... View more
06-17-2019
04:29 AM
Hello Community! I'm trying to create an admin role that gives a user access to the Monitoring functionality. But with full access to Monitoring only, they are not able to open the details for each log entry - Detailed Log View. I've granted Privacy access too, but that didn't help. Anyone know what specific access is needed to be able to click on the spyglass for all log entries? Thanks!
... View more
06-06-2018
05:56 AM
Also, whether it'd be possible to set a variable for "additional recipient" or something like that, that would use the username defined in "opaque: failed authentication for user 'username'", so that both myself and the user in question that failed login, would receive an email about a failed login. For instance - let's say the logs echo opaque: failed authentication for user 'username123' The username stated in each logged entry would be GET'd, and "@domain.com" would be appended and used to notify said user.
... View more
06-06-2018
05:26 AM
Hello Community! Occasionally we get "SYSTEM ALERT" forwarded to the mailbox, in regards to failed authentications where there was an attempt using a non-existent user. Is it possible to add more information in these logs? Specifically whether the user tried to log on using the GlobalProtect client, or the portal login page? Which portal was used? Unless you're using different auth profiles for each portal, you're kind of in the dark as to which one was attempted. If not, I'd like to add a feature request 🙂
... View more
02-28-2018
02:21 AM
Will try that out, thanks! Just waiting on a response on the change order first 🙂
... View more
02-20-2018
11:38 PM
Hello community. Let's say I have an Atlassian Confluence site that needs to be accessed by a user (or multiple) - is it possible to specify down to the URL to only give the user access to a given set of pages? Confluence permissions only allow me to give access to entire spaces. Could be advantageous to allow a general user not tied to a specific person to get access only to a list of URLs in many different spaces, for instance where you would have a consultant or something like that that needs to access some pages spread across the entire space directory. Thanks!
... View more
- Tags:
- Security Policy
11-06-2014
12:00 AM
So we've now tried an older version (2.0.1), and the same issue exist for this one. Except if we do as you mentioned regarding on-demand, SSO and remember me. For each test we used on-demand, and SSO disabled, and it kept logging on - until we removed "remember me". This seems awfully bothersome to make sure it won't logon by itself - turning off 3 "features" to stop it from doing this is not very pleasing :smileysilly: Thanks.
... View more
11-05-2014
06:24 AM
I see, and this can't be changed anywhere?
... View more
11-04-2014
11:40 PM
Hi, Sorry for late response. He was going to try to test this yesterday if he had the time, so I will hopefully get back to you on that soon :smileysilly: But, another question, is there a timeout / retry setting for GlobalProtect anywhere?
... View more
10-31-2014
04:56 AM
Hello HULK, We are using the newest 2.1.0. Want me to check with an older version instead? Probably won't be able to check until next week though.
... View more
10-31-2014
12:49 AM
Some of our users are experiencing automatic logon, even if the GlobalProtect is configured with on-demand. In most cases this is just a minor inconvenience, but one of our portals are configured with two-factor authentication, and when they chose "deny", GP continues to try and connect repeatedly. This is however inconvenient, since their users keep getting locket out. It would seem that this occurs after hibernation, and that the OS is trying to "resume" the vpn connection as well(?). Although I've noticed this maybe 1 or 2 times in total on a desktop computer that did not come out of hibernation - I had to kill the application because it would not stop. Has anyone encountered the same issue and/or know of a solution to this? Thanks!
... View more
10-28-2014
04:03 AM
Hmm, is there something I'm missing? I'm getting invalid syntax when trying to run the command " set deviceconfig setting tcp asymmetric-path bypass" 😕
... View more
10-23-2014
05:11 AM
Ah, sorry, I guess I could have explained it a little better. Ok, thanks. I guess, at least it should be made possible to turn this setting on/off (remove the possibility of selecting the GP icon), and/or include the fingerprint information (or whatever two-factor authentication used) with the GP authentication, if it's even possible(?).
... View more
10-23-2014
04:44 AM
It's the "sign in options" that you'll find in (at least) windows *8* and windows 2012 server - it's located below the password input. So, I can either choose the "key", which is the windows password (in this case two-factor with fingerprint), or I can choose GP, which then circumvents the whole fingerprint process, and lets me login using only the domain password, instead of domain password + fingerprint. This could be prevented by implementing two-factor authentication on GlobalProtect - but that's not how it should be :smileysilly:
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-18-2019
05:15 AM
|
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
