Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About KotreshaMC
About KotreshaMC
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
11-17-2017
42Posts
4Likes
2Solutions
Nov 17, 2017Last Visited
User
Activity
User
Profile
Latest posts by KotreshaMC
| Subject | Views | Posted |
|---|---|---|
| 902 | 11-05-2017 11:17 PM | |
| 3921 | 08-29-2017 12:34 AM | |
| 21952 | 08-28-2017 11:34 PM | |
| 21939 | 04-20-2017 02:05 AM | |
| 21961 | 04-17-2017 07:39 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 06-03-2016 06:54 AM | |
| 2 | 08-28-2017 11:34 PM | |
| 1 | 06-12-2016 09:38 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 7 | |||
| 1 | |||
| 4 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 12-15-2015 11:19 PM |
| Date Last Visited | 11-17-2017 05:11 AM |
| Total Messages Posted | 48 |
| Total Likes Received | 4 |
11-05-2017
11:17 PM
Version 747 Notes: This emergency content update provides coverage for recent generic exploit host page updates that have been seen in the wild. We recommend that you upgrade all devices to the latest Applications and Threats content version and review your security policy to ensure the desired action is configured for each security policy rule. Palo alto says that it has seen this activity in the wild, can anyboady share any link to the base article or tecchincal article related to this signature?. I did not find anything useful details in the threat vault as it gives only generic discription. " This signature detects a landing page used by an exploit kit. Browser fingerprinting or attempts to direct a browser to download targeted malware are examples of behaviors that could indicate an exploit kit landing page and trigger this signature. " Regards, kotresha
... View more
08-29-2017
12:34 AM
Unknown-tcp means the firewall captured the three-way TCP handshake, but the application was not identified. This may be due to the use of a custom application for which the firewall does not have signatures. Seesion end reason is (n/a or unknown): PAN-OS provides a session end reason field for traffic logs. This field only applies to logs of subtype end . For all other subtypes, the value is not applicable (N/A)(example: logs of subtype: start it will show n/a) I guess you have enabled both Log at Session Start, Log at Session end on the associated security rule thats why it's showing both unknwon and and aged out on the session end reason, DNS uses UDP protocols so its obivisouly aged-out always. i dont think this caused internt slowness on the PC.
... View more
08-28-2017
11:34 PM
2 Kudos
great insights aboubt Virtualization, i love the way you explain.
... View more
04-20-2017
02:05 AM
Thanks for all your support, after upgrading the firewall to 7.1.9 issue resolved.
... View more
- Tags:
- anks
04-17-2017
07:39 AM
1) Is there any other portal configuration that you get, other than the rest of the users? Ans: No 2) Although you mentioned the default method is IPsec, but please verify that you are indeed connecting via IPsec too. Once you are connected to the GP, check under Network->Gateway->Remote users(right side). See what the tunnel type column says. Ans: SSL 2) What's the connect method - on-demand? pre-logon? etc.? Ans: On-demand (with RSA token) 3) Have you tried your account from another machine? Ans: Yes, it worked fine 4) Have you tried re-installing the client? (I'd suggest trying with 3.1.6) Ans: Yes i tried but not usefull 5) Configure split-tunnelling, if you don't have it already. Send the private subnets traffic to firewall, send the internet traffic through your regular adapter. Run a continuous ping from cmd (ping -t 8.8.8.8). If you see the GP disconnecting, see if there is any ping drops. Ans: We have configured split-tunnel.
... View more
04-12-2017
10:13 PM
Can anybody help with this ?
... View more
04-12-2017
12:34 AM
PAN OS:7.1.3 GP version:3.1.5 Operating system: Windows 10 Pro We are connecting over:IPSec tunnel
... View more
04-12-2017
12:32 AM
I have reinstaled already but still fac @BPry wrote: If your getting a fatal:bad record mac then you have an issue as the error itself is completely fatal to the VPN communication process. This is caused by the first encrypted message has something wrong with it's crypto and immediately shows up as bad_record_mac. Just by the nature of VPN appliances this message is purposely cryptic and can be anything from failing integrity checks or for anything in the cryptographic layer. I would first start to troubleshoot by uninstalling and reinstalling GP, it might help to take off any other VPN application you have installed as well as this could potentially cause issues as well. ing the same issue.
... View more
04-11-2017
06:42 AM
Hi, Im facing issue with connecting to GP VPN, unfortunatly im the one who is having issue. VPN works fine on other cmputer but having issue with my computer below are the error msg i got during the VPN disconnect time (T10836) 04/11/17 18:51:28:501 Debug( 980): VPN handle dhcp packet (T10516) 04/11/17 18:51:46:676 Debug(1189): SSL3 alert write:fatal:bad record mac (T10516) 04/11/17 18:51:46:676 Error( 840): SSL_read() failed: 1 -1 socket error 0. ntry is 0 (T10516) 04/11/17 18:51:46:676 Error( 811): VPN: Socket Failed to receive! ret = -1 (T10516) 04/11/17 18:51:46:676 Error(1126): ProcPackets, RecvFromSocket() failed (T10516) 04/11/17 18:51:46:676 Error( 410): ProcPackets() failed, get out of ProcMonitor (T10836) 04/11/17 18:51:46:676 Info ( 553): ProDrv: VPN disconnect event, get out of ProcDrv (T10836) 04/11/17 18:51:46:676 Info ( 570): ProcDrv thread dies (T10516) 04/11/17 18:51:46:676 Info ( 527): ProcDrv quit (T10516) 04/11/17 18:51:46:676 Info ( 504): Before ProcMonitor quit, disconnect vpn Can anybody know whats the issue and how to overcome from this? Kindly help me. Kotresha
... View more
- Tags:
- global protect
11-29-2016
11:56 PM
I hope its future of Global protect, check this configuration under Network->Gllbal protect->gateway->selcet gateway->agent->external gateway check is it manuall or not?
... View more
08-17-2016
05:50 AM
Hi Reaper, i don't think aged-out is the naturall way of seeion end, Aged out - Occurs when a session closes due to aging out I'm sorry if i'm worng,
... View more
07-01-2016
12:54 AM
There is one another way i found, we can create the objets with the FQDN provided in the article and create security policy for it (FQDN initially resolves at commit time. Entries are subsequently refreshed when the firewall performs a check every 30 minutes; all changes in the IP address for the entries are picked up at the refresh cycle) so this might helpful in blocking the IP that resolves to specified shodan domain.
... View more
06-30-2016
03:50 AM
We are aslo observing the simmilar kind of traffic triggering from the IP's listed in that article. blocking individual IP is not good idea but if there is any way that we can block IP's thase resolves to * shodan.io will be best approach. Im not sure how we can do this 😞
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-17-2017
05:11 AM
|
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
