Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- ›
- About MohamedSharief
About MohamedSharief
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
09-10-2019
99Posts
18Likes
11Solutions
Sep 10, 2019Last Visited
User
Activity
User
Profile
Latest posts by MohamedSharief
| Subject | Views | Posted |
|---|---|---|
| 3030 | 01-20-2019 06:35 AM | |
| 906 | 02-07-2018 01:02 PM | |
| 836 | 01-17-2018 05:55 AM | |
| 1223 | 01-17-2018 05:49 AM | |
| 914 | 01-03-2018 09:38 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 01-20-2019 06:35 AM | |
| 1 | 01-17-2018 05:49 AM | |
| 1 | 07-25-2017 01:10 AM | |
| 1 | 07-25-2017 12:56 AM | |
| 4 | 06-14-2017 11:50 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 | |||
| 3 | |||
| 1 | |||
| 2 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 09-20-2016 11:10 PM |
| Date Last Visited | 09-10-2019 06:32 AM |
| Total Messages Posted | 108 |
| Total Likes Received | 18 |
yesterday
Hi, We have the same issue here with PAN OS 9.1.9 and GP 5.1.5. As anyone of you guys solved the problem on your side?
... View more
10-12-2020
03:10 PM
I had same error. Try deleting the radius setting and re-add again. Do the same on RADIUS too. Not sure which device is creating this issue. But we had same issue on couple devices and it worked both times.
... View more
09-10-2020
02:22 AM
Solution worked for me too. Don't know why, but I'll take it.
... View more
07-18-2019
12:46 PM
Having a similar issue with Custom URL Category for Akamai site and SSL Decrypt. Was trying to test earlier, have multiple sites in the URL Category and added to a rule to exempt my machine from decryption, but the logs show that the traffic is still being decrypted and the installation that is trying to reach out is failing. When I switch to a complete no-decrypt, then the traffic is not decrypted and the installation completes.
... View more
01-21-2019
04:00 AM
On each wireless controller you need to enable logging of user authentications and you need to send each authentication event as syslog to the firewall. Commands are: logging level notifications user process authmgr logging <FW IP address> type user severity notifications facility local1 source-interface <mgmt vlan of the controller>
... View more
02-08-2018
11:24 AM
Thank you all for your replies and this like was exactly what I needed!
... View more
01-17-2018
10:17 AM
Thank you very much for your input!
... View more
01-17-2018
05:55 AM
I assume the only solution for this at the moment till PA release something is to use internal CA, import the certificate on the Server and use the internal CA root cert on the client. in case of roaming users the root certificate will be added by support team and they can connect normally in that case. The connection will not work if the PC doesn't have this root certificate. Regards, Sharief
... View more
12-01-2017
01:38 AM
Hi All, at least this is completely strange!? If you review my WF submission, framed part definitely is not seen by WF cloud for the first time, right? File has same name, same hash and it is marked as malicious?! Why this file with high severity, marked as malicious, repeatable allowed by PAN OS8.0? p.s. Off course all my profiles, antivirus and antispyware were tuned with reset-both action...
... View more
09-01-2017
02:15 PM
1 Kudo
Bug has been discovered by TAC which is only specific for 5200 series running on 8.0.4 (only) PAN-OS. You have an option to downgrade to 8.0.3h4 or wait for 8.0.5 release.
... View more
08-09-2017
03:25 AM
Hi Fozail, Sorry forgot to update this thread. The commit was successful after the FW reboot. Regards, Sharief
... View more
08-09-2017
02:49 AM
Hi Ahmed, If you are sure about the vmware configurations then you need to enable some feature for PA VM only in order to be able to ping from the XP client to PA trust interface: Without enabling this you won't be able to ping from your host to the trust interface of PA VM. You can find it in Device> Setup> Management> General Settings. Let me know if that worked with you! Regards, Sharief
... View more
07-25-2017
03:48 PM
1 Kudo
Thanks M. We noticed that if the certificate used for forward proxy SSL is not SHA 256 then the Google Chrome browser will not behave. Our Windows PKI is still producing SHA 1 certificates and would need to be updated to be of any use for issuing these certs to the Palo. Once the SHA 256 cert generated from the Palo is imported to the test PC’s then Google Chrome immediately sees it in the store and is happy to use this for SSL inspection. A SHA1 cert from our Windows PKI does not show up in Chrome and is ignored for SSL decryption, which was the start of this issue. It would seem that Google is on the fast track to make SHA 1 a bit of history, while IE11 is still happy to use SHA1 for security.
... View more
07-25-2017
02:50 PM
2 Kudos
Hi Farzana, Assuming it's PAN-OS 7.1 or higher, try this: Network->Portals->PortalName->Agent->Configs Or, are you talking about SSO? Regards, Anurag
... View more
07-25-2017
09:01 AM
1 Kudo
@aziz_paloalto, Don't judge your actual risk factor by what the calculated risk factor is displayed as, that just has you worrying about potentially nothing. The default risk factor of applications will have that go up depending on what app-ids are being identified, however if you have a proper security rulebase configuration that locks everything down to sanctioned apps then I wouldn't be to worried about it. Most applications will bring you close to a Risk cateogry of 4. App-ids such as ssl, youtube-base, web-browsing, google-base, facebook-video, facebook-base, apple-appstore, and many others are all Risk 4 app-ids. You can edit these if you simply want to tell management that your risk level has gone down, but really that number doesn't actually mean much of anything unless you've taken the time to fine-tune your different rulebases, created custom app-ids, lowered the Risk of known sanctioned applications that have inherint risks associated with them and so on. Otherwise I would kind of expect this to be anywhere from 3-4 depending on the type of network traffic that you are processing.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-10-2019
06:32 AM
|
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
