Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About fjwcash
About fjwcash
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
11-05-2020
154Posts
27Likes
16Solutions
Nov 05, 2020Last Visited
User
Activity
User
Profile
Latest posts by fjwcash
| Subject | Views | Posted |
|---|---|---|
| 480 | 11-05-2020 08:14 AM | |
| 903 | 10-13-2020 11:06 AM | |
| 913 | 10-13-2020 10:57 AM | |
| 1355 | 10-08-2020 04:08 PM | |
| 1240 | 09-24-2020 11:19 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 11-05-2020 08:14 AM | |
| 1 | 10-13-2020 11:06 AM | |
| 1 | 09-24-2020 11:19 AM | |
| 2 | 08-26-2020 08:43 AM | |
| 1 | 01-15-2020 10:32 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 | |||
| 1 | |||
| 4 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 05-06-2016 10:51 AM |
| Date Last Visited | 11-05-2020 11:56 AM |
| Total Messages Posted | 155 |
| Total Likes Received | 27 |
11-05-2020
08:14 AM
1 Kudo
Correct. It's an issue in PanOS and Panorama version 8.1.16. Both Panorama and the firewalls need to be running 8.1.15 or 8.1.17.
... View more
10-13-2020
11:06 AM
1 Kudo
Thanks for the confirmation! 🙂
... View more
10-13-2020
10:57 AM
Correct. The issue is with PanOS 8.1.16. If the firewalls are running that, Panorama can't switch device context to them. You need to downgrade Panorama and the firewalls to 8.1.15. Or, 8.1.17 has been released, and they say this has been fixed with that release. We haven't upgraded any firewalls yet to test this.
... View more
10-08-2020
04:08 PM
It depends which window manager / desktop environment you use. Running KDE/Plasma on Ubuntu 20.04 gives me 2 separate GlobalProtect icons in the system tray. One let's me connect/disconnect and edit configuration. The other just sits there. If I uninstall the GP package, both disappear. I think one is a hold-over from having 5.1.x installed, as the second one is from 5.2.x. Sometimes, the GUI popup shows right above the system tray, and it's easy to manipulate. Other times, it shows in the top-right corner of the screen and requires a very fast mouse movement to get to it (using focus follows mouse). Overall, it's nicer to use, but more flakey than the CLI version. Will be nice once they get the GUI sorted out. Aren't there a bunch of freedesktop/XDG standard practices for making these kinds of system tray applets work across WMs/DEs? GP for Linux also doesn't like laptops that go to sleep while it's connected. Requires a full deinstall/reinstall of the package to make it work again. The dreaded "can't connect to local gpd" error.
... View more
09-24-2020
11:19 AM
1 Kudo
The latest update to Chrome 85 has fixed the "Connect through NAT'd connection" issue. Currently using Chrome 85.0.4183.102, and I can login to Panorama again. 🙂 The fix for the "Switch device context" issue is targeted for 8.1.17 sometime in October.
... View more
09-11-2020
11:45 AM
Possibly related to this, Google Chrome 85 is not able to login to Panorama 8.1.16 or 8.1.15-h3 through a NAT connection. Chrome 84 and earlier have no issues logging into Panorama (regardless of version). And, using an SSH tunnel to get to the same subnet as the Panorama server, Chrome 85 is able to login right away. Fill in username and password, hit login, is shows the "Creating administrative session..." message, then goes to a blank screen with the spinning icon on the tab, and sits there indefinitely. Chrome eventually pops up the "unresponsive page" dialog where you can kill it or wait. Firefox has no issues logging in through a NAT connection, so I'm leaning toward an issue in Chrome 85. But it only cropped up after upgrading to Panorama 8.1.16, and persisted after downgrading to 8.1.15-h3. Chrome 85 on Windows or Linux fails to login. Chrome 84 on Windows and Linux logs in fine. Firefox 80 on Windows and Linux login fine.
... View more
09-11-2020
11:38 AM
There is no Reference Template section in Panorama 8.1.15-h3. whether creating a new Device Group, or editing an existing one.
... View more
09-03-2020
08:22 AM
Hrm, we were given a different bug number: PAN-154181.
... View more
08-31-2020
05:49 PM
Yeah, looks like it's a bug. They're working on it. 😞 Suggested workaround is to downgrade to 8.1.15-h3 if you need to switch context in Panorama.
... View more
08-26-2020
12:44 PM
Correction: looks like we can't use the drop-down list for switching to *any* of the firewalls running 8.1.16, from Panorama 8.1.16. Guess I'll open a support ticket for this. 😞 Edit: Case #01569614 opened.
... View more
08-26-2020
11:23 AM
Panorama and PanOS 8.1.16 fix 98% of the issue. 🙂 All columns are plain text (no XML or HTML tags anywhere), but the Target column only shows [object Object] instead of the value of the object. All of the useful columns, though, for audit purposes are available and properly populated.
... View more
08-26-2020
08:43 AM
2 Kudos
Upgraded Panorama to 8.1.16. No issues with the upgrade. Upgraded all our PA-220s to 8.1.16. No issues with the upgrade. Upgraded our PA-5220s to 8.1.16 (from 8.1.9-h4). If I connect directly to the management IP, I can login to the web interface. If I use Panorama's drop-down list to switch to the firewall, it gives a "createRemoteAppwebSession: response code received 302" error with a "Switch to Panorama" link that takes me back to the Panorama interface. Pushing commits to the PA-5220s works. And direct logins work. But Panorama links to the firewall web GUIs fails. Rebooting the Panorama instance doesn't help. Anyone come across anything similar? Google searches for that error message just bring up captive portal redirect stuff.
... View more
07-21-2020
11:12 AM
Yes, we have an open support case for this issue (01330259). It's been "fixed in next release" for several releases now. 🙂 It keeps getting pushed back.
... View more
05-05-2020
10:19 AM
I use an LE cert for our GP Portal. And the Web UI for each firewall. The only thing we don't use LE certs for is the rest of the GP infrastructure (gateways and clients). That's all done using the self-signed, trusted ca cert on the portal. We use DNS-based checks for creating the LE certs. No web server required. Currently using dehydrated (python script) as it was the first one that I found that supports DNS challenge and hook script support. Renewing the certs is completely automated. The only manual part is copying the cert to the firewall, as I haven't gone through all the testing to get it working via the XML API. 🙂
... View more
03-27-2020
02:38 PM
Aha! Got it to work with the help of Palo Alto support. With OpenLDAP, you have to match the Domain Name in the LDAP Server Profile, the Authentication Profile, and the Group Mapping (and it doesn't like . in the domain). We had it matched across them all, but using sub.sub.tld for the domain, which it doesn't like. And, in the Portal config, when you list the group, you have to use the full LDAP cn=groupname,ou=users,dc=sub,dc=sub,dc=tld. It doesn't like using the domain\groupname short-name format. With those two settings changed, listsing just the group in the Portal config allows users in that group in LDAP to login!
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-05-2020
11:56 AM
|
Latest Tags
No tags yet
Likes From
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
