About mindterra

mindterra · ‎05-24-2013

Hi, I have to demo PAN in 3 Legs firewall compose Internet, DMZ and Internal zones. so I have some question regarding to this. 1. What mode on mirror I should config on the firewall, TX or RX or TX and RX ? 2. Should I configure virtual system for each tap interface and why?

mindterra · ‎05-09-2013

Hi, I see alot of b/w usage in bittorrent application but I didn't see any files in there. ps. I already apply file blocking profile with alert action.

mindterra · ‎01-28-2013

Hi all, I would to make a log-out page for captive portal. which working by inject an CLI command to PAN with client IP. for example clear user-cache ip 192.168.5.200 1. what php code can I use to collect client IP address ? 2. what php code can I inject API to PAN ? Thank you.

mindterra · ‎01-08-2013

Hi, The customer request me to create Captive Portal Logout Page. So I will ask that what should I integrate between UserID Agent and UserID API. which is a good one ? Thank you

mindterra · ‎01-03-2013

Hi, my customer would like to insert PAN device between LAP and WLC to inspect Client A and B traffic. Can we do that ?

mindterra · ‎12-07-2012

Hi, can we export downloaded software img from PAN-device ?

mindterra · ‎10-30-2012

Hi, I have some problem. As our design, we allow certain application in policies and deny all at the bottom. and we found that PAN device can't identify some app. so it is denied at the last rule. How could we allow this unidentified app if we can't select this in application list?

mindterra · ‎10-27-2012

This is the terpology

mindterra · ‎10-26-2012

Hi, I would like to know this. is anyone ever config it ? Thank you.

mindterra · ‎10-20-2012

This module also have logout mechanism ?

mindterra · ‎10-07-2012

Upload Failed: Amazon S3 returned an io error: Error #2038. occur to anyone ?

mindterra · ‎09-19-2012

Hi, I means if I can check cpu load and memory statistics on tech-support file it would be good. but I don't know how to check it.

mindterra · ‎09-18-2012

Hi, I would like to know how to check PAN performance after demo to customer. because I'm not sure if the device can support the load on customer site. Thank you.

mindterra · ‎09-12-2012

hi, could anyone explain me what each result means or can I find a technote ? thank you.

mindterra · ‎09-04-2012

thanks

mindterra · ‎09-04-2012

hi, since in the configuration of external gateway ip in portal config is static. so do you have any trick to support the dynamic IP ?

mindterra · ‎09-01-2012

Hi, I know that security rule can set with user and group but some customer need the OU. the PAN support this ?

mindterra · ‎09-01-2012

Hi, I also found the problem that a user in a group can't hit a rule that set the user group. the configuration is below, could you please help me identify what wrong with this configuration ? === LDAP Server === Domain : palo-lab Type : other Base : dc=palo-lab,dc=com Bind DN : cn=ldapadm,dc=palo-lab,dc=com === Group Mapping === Group objects - Search Filter : - Object Class : posixGroup - Group Name : internet - Group Member : memberUid User Objects - Search Filter : - Object Class : posixAccount - User Name : uid

mindterra · ‎08-21-2012

hi, I issue the command "show user ip-user-mapping" on PAN-OS 4.1.6. In the environment, there're 3 virtual systems. I see in the traffic logs in Web UI, it can show user. but the cli doesn't.

mindterra · ‎08-10-2012

It work fine now after I change domain in LDAP Server Profile to have no .com Thank all

mindterra · ‎08-10-2012

do you have any command on palo alto to check whether the user is in which group ? i'm already set LDAP Server Profile and Group mapping but it doesn't work.

mindterra · ‎08-09-2012

Hi rmgnetwork, do you have an example ? I have run into this problem the same.

mindterra · ‎07-16-2012

Can you do a DNS lookup for the portal FQDN? Yes, It can. Can you try using the ip address instead of the FQDN? I have tried, but it also not works. PS.Now, after I have uninstalled (use tools) then it's ok

mindterra · ‎07-07-2012

Hi, my customer can't access vpn, the agent log show that there's an error "PostRequest failed with error code 12007" It happens with some users, but my PC and VMware can access it so this should not be configuration error on firewall device. then I go Wireshark on the client seeing no traffic destine for the IP of SSL VPN Portal and Gateway. so it could be the bug with TCP/IP stack ? and also error can associated with MS error code or not ? Error Messages ERROR_WINHTTP_NAME_NOT_RESOLVED 12007 The server name cannot be resolved

mindterra · ‎06-22-2011

I found same problem. PAN-agent detect some users to _unknown_. How solution for this problem? I must check "Disable Netbios/WMI Probing" or not?

mindterra · ‎12-17-2010

Mike, If I use redirect mode and Radius authentication only, I don't use NTLM Can Captive portal work? In case of certificate errors

mindterra · ‎12-17-2010

If I use redirect mode for Captive Portal, NTLM required for CP or not. I am using Radius authentication. What a way for captive portal does without NTLM but Radius only?

mindterra · ‎12-14-2010

IE 8 display as ie_cp_error.jpg

mindterra · ‎12-05-2010

For IE8, I found a problem. IE8 can not trust valid cert but other browser as Firefox can trust cert. Have you ever found this issue? How solved? Thank You

mindterra · ‎12-02-2010

PAM OS: 3.1.6 I use IE browser 8 for captvie portal but IE get cert very slowly. If I use firefox, It is OK. Has captvie portal problems with IE 8? Thank You

Date Registered	‎10-18-2009 09:44 PM
Date Last Visited	‎11-30-2018 02:56 AM
Total Messages Posted	30
Total Likes Received	1

Online Status	Offline
Date Last Visited	‎11-30-2018 02:56 AM

About mindterra

Best practice for demo PAN in Tap mode

PAN doesn't see files in bittorrent ?

Need a help. Inject CLI command via API to PAN with client IP

Please suggest a Captive Portal Logout Page

How to inspect wireless LAN traffic pass through Cisco WLC

does globalprotect support dynamic ip?

Re: Rules not applying to AD groups

Best practice for demo PAN in Tap mode

PAN doesn't see files in bittorrent ?

Need a help. Inject CLI command via API to PAN with client IP

Please suggest a Captive Portal Logout Page

How to inspect wireless LAN traffic pass through Cisco WLC

How to export downloaded software img from PAN-device ?

How to allow unidentifed and insufficient-data application in the policy ?

Re: Does the Link Aggregate work with HA Active/Active?

Does the Link Aggregate work with HA Active/Active?

Re: How to: Import Aruba Wireless usernames into a Palo Alto box

Case management : Upload file failed

Re: how to check PAN performance after demo to customer

how to check PAN performance after demo to customer

please explain "show system resources" output

Re: does globalprotect support dynamic ip?

does globalprotect support dynamic ip?

Can set a security rule with OU ?

Re: User/Group mapping OpenLDAP

"show user ip-user-mapping" doesn't show users

Re: Rules not applying to AD groups

Re: Rules not applying to AD groups

Re: Rules not applying to AD groups

Re: GlobalProtect Agent, PostRequest failed with error code 12007

GlobalProtect Agent, PostRequest failed with error code 12007

Re: Issue with PAN-AGENT

Re: Does Captive Portal work on Virtual Wires?

Re: Avoiding Certificate Error With Captive Portal

Re: Avoiding Certificate Error With Captive Portal

Re: Avoiding Certificate Error With Captive Portal

Re: Avoiding Certificate Error With Captive Portal

Strata

Prisma

Cortex

About mindterra