About gsamuels

gsamuels · ‎06-10-2011

Unfortunately this functionality is not supported in current release, this would be a request for enhancement.

gsamuels · ‎06-10-2011

URL filtering activation should have no affect on SSL traffic. We would need to take a look at your policies If this persists please open a support case.

gsamuels · ‎06-10-2011

Here are the services listening on the ports you have indicated: 6080-6081 Captive Portal captive portal redirect and URL override page 6082- Captive portal and captive portal redirect with certificate

gsamuels · ‎06-10-2011

Here are the services using the open ports you have indicated. 6080-6081 - Captive portal, Captive portal redirect and URL override page 6082- Captive portal Captive portal redirect with certificate.

gsamuels · ‎06-09-2011

No this option does not take the expiration of the certificate as part of he decision making process, this would normally be caught by the client browser.

gsamuels · ‎06-09-2011

As far as I know we have no such standard, this would have to be developed by third party vendor like NSS.

gsamuels · ‎06-08-2011

There are no additional settings on 3.1.8 , this is all based upon the threat database. We would need specific examples to determine if we need to add additional signatures or update existing ones. The file blocking profile in 4.0 has a new action called continue, which can be used to deliver a comfort page when users attempt to download an executable file. The page prompts the user to click continue on the comfort page prior to downloading an executable file. Verbiage on the comfort page will alert the user of the executable file and if they haven't specifically requested the page, they should not continue, but click Back. This is an effective way to stop drive-by downloads.

gsamuels · ‎06-08-2011

Pan handles encrypted traffic as the man in the middle, however we do not give you the option of blocking based on certificate expiration. List of CA's is normally maintained by software release, CA,s cannot be removed from this list as far as I know.

gsamuels · ‎06-08-2011

The PAN will not support additional protocols PAgP, I have confirmed we support the standard for link aggregation (802.3ad), this should work.

gsamuels · ‎06-08-2011

Hello, I have confirmed with engineering that this statement is not valid for current HA behavior, in a non functional stat we will not compare the number of failed links between the active and the passive device. We are in the process of correcting the online document. Thanks for the feedback. Regards, Gary S.

gsamuels · ‎06-07-2011

Hello, This could be a result of the HA settings in combination with the release and resources being used at the time of the split brain event. You should open a support case to have a closer look. Regards, Gary S.

gsamuels · ‎06-07-2011

Hello, We will indicate unused policy's but not objects, however if an object is in use we will not allow you to delete it from config. Hope this helps Regards, Gary S.

gsamuels · ‎06-06-2011

Hello, Unfortunately Panorama does not currently support this functionality, If this is a feature you wish to pursue, you are encouraged to submit a request for enhancement via your local sales channel. Regards, Gary S.

gsamuels · ‎06-06-2011

Context 'unknown-req-udp-payload' will allow you to match the udp payload, and as in all other cases the custom signature will take prescience.

gsamuels · ‎06-06-2011

Hello, There is currently no Configuration option on the Pan-Agent to Disable server Sessions. If this is a desirable feature you are encouraged to submit this feature request via your local sales channel. Regards, Gary S.

gsamuels · ‎03-25-2011

If this is still the case on the latest content version we will need to take a closer look at your traffic. Please open a case with support at your convenience.

gsamuels · ‎03-25-2011

We do not see this behavior inhouse, can you open a support case so we can take a closer look.

gsamuels · ‎03-25-2011

There is currently no OID for 'show system statistics'

gsamuels · ‎03-25-2011

This should be opened as a support case so we can insure it is being tested

gsamuels · ‎03-25-2011

Hi We currently do not have any additional documentation on this solution.

gsamuels · ‎03-25-2011

Hi You should be able to add this url to the allow list in the url profile to create an exception .

gsamuels · ‎03-24-2011

Application FTP covers both activ and passive ftp, unless you have it set for application default on the policy there should be no reason for us to drop this traffic. We may need to take a closer look at your policy.

gsamuels · ‎03-24-2011

Hello, Unfortunately the detailed log information is propriatary to engineering and not available for us to provide.

gsamuels · ‎03-24-2011

The clear counter global and clear counter all are the only administrative clearing commands. But these are mainly for interface and drop counters.

gsamuels · ‎03-24-2011

Captive portal is specifically made to identify users that are not logge into your domain, you will also need to authenticate these users using radius, ldap or local database.

gsamuels · ‎03-23-2011

Hi, As long as the user is hitting the same policy we should still block facebook chat regardless of how they are logged in. If this user is confirmed to be using the same policy every time you should open a support case so we can take a look at this. Regards, Gary S.

gsamuels · ‎03-23-2011

Hi, No Ts-agent has not been currently tested with xen-desktop This feature is still being investigated by product management, you should be able to get an idea if it has been placed on the roadmap from your local sales contact Regards, Gary S.

gsamuels · ‎03-23-2011

Hi, We do not currently have any information on device adapter tested with Palo alto firewalls.

gsamuels · ‎03-23-2011

Hi, As long as we have an active security policy with AV, vulnerability and spyware profiles there should be no additional tuning needed. If this is the case and you can confirm malicious traffic is present we would want to take a look at your device. Regards, Gary S.

gsamuels · ‎03-22-2011

The login attribute " uid" in the working authentication profile we assume would be used in the sslvpn authprofile instead of 'memberUid' On initial review that could be causing auth attempts to fail.

Date Registered	‎05-01-2009 12:27 PM
Date Last Visited	‎08-12-2019 01:19 AM
Total Messages Posted	53
Total Likes Received	24

Online Status	Offline
Date Last Visited	‎08-12-2019 01:19 AM

Strata

Prisma

Cortex

About gsamuels