This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About zthiel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About zthiel
09-12-2023
20Posts
0Likes
0Solutions
Sep 12, 2023Last Visited
User
Activity
User
Profile
Latest posts by zthiel
| Subject | Views | Posted |
|---|---|---|
| 2104 | 04-10-2019 11:39 AM | |
| 1916 | 04-30-2018 08:03 AM | |
| 2427 | 04-27-2018 12:13 PM | |
| 2436 | 04-27-2018 11:32 AM | |
| 3605 | 04-27-2018 10:08 AM | |
| 3612 | 04-27-2018 09:53 AM | |
| 3620 | 04-27-2018 09:30 AM | |
| 3730 | 04-27-2018 09:17 AM | |
| 3731 | 04-27-2018 09:17 AM | |
| 4929 | 04-27-2018 08:31 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 07-26-2010 11:38 AM |
| Date Last Visited | 09-12-2023 08:21 AM |
| Posts | 20 |
04-10-2019
11:39 AM
I am struggling with utilizing ActiveDirectory groups in firewall policy. My concern is then our AD administrators have control over transversing our firewall policy. Generally speaking say for example we have a FW policy setup where AD group ServerAdmins has <some type of> to a resource, they (the AD administrator) could very easily throw any user into that group thus giving sed person access to the resource. However I do love the user-ID capabilities and want to leverage that but it gets tideous having individiaul users defined in policy. So my thought\question is if I could have a locally defined PA group (that I administrator) this would allow me to add the ActiveDirectory defined users into this group and then use this group in FW policy. Now I'm getting the benefits of user-ID and efficiency of using groups in firewall policy. Curious if this is at all possible or if anyone else has any other options\ideas?
... View more
04-30-2018
08:03 AM
My issue has been resolved, for some reason the Captive Portal Comfort Page was at version 7.x and not at 8.x. After I corrected that everything is as expected.
... View more
04-27-2018
12:13 PM
I'll revist the entire config again, on a side note, if I auth into the page everythinf works, correctly. After I sign in (to the basic page) I am brought to the page below, I then get the notifcation on my cell phone from the Duo app, I accept the push\auth on my phone and then the access to the backend server works correctly. So it's working, just not getting the sign-in page as I would expect it to look.
... View more
04-27-2018
11:32 AM
Just seems strange as I am using the default prebuilt pages. I have not made any modifications.
... View more
04-27-2018
10:08 AM
Errors I am seeing are:
... View more
04-27-2018
09:53 AM
I guess I would not know which log\logs to go and look at from the console.
... View more
04-27-2018
09:30 AM
I've tried that from my MacOS with other browsers, FireFox, Chrome, and Safari all present the same way. Even tired a Windows device with the same browsers, all present the same.
... View more
04-27-2018
09:17 AM
And it should look more like this.....
... View more
04-27-2018
09:17 AM
This is what I am getting......
... View more
04-27-2018
08:31 AM
I have an odd issue where when I get the prompt from Global Protect saying "You have attempted to access a protected resource please click the link to authenticate" I am brought to the basic (not pretty) looking Captive Portal web-form login page and not the nice\fancy MFA login page. Does anyone have any ideas on this?
... View more
03-19-2018
11:09 AM
I have my MFA (using Duo) sort of working with non-browser based applications. However I am experiencing an issue that is an identical result whether I use SSH (putty) or RDP (remote desktop). Basically I am timing out because I cannot get through the Palo Alto authentication portal and then waiting for the push notification to the Duo agent on my cell phone in time for me to authenticate. Has anyone else experienced this and or have any advise as far as how to resolve?
... View more
03-19-2018
08:51 AM
I'm just confused as to why the standard ports are: tcp/dynamic and not itimized out ports\protocols.
... View more
03-16-2018
07:03 AM
Curious if anyone is successfully using the commvault application within their Palo Alto application policies? We tried it and it is not working at all to detect our CommVault application traffic. The details on the application itself seem quite old.
... View more
03-08-2018
05:58 AM
I am being directed to the interface IP that I have setup on the External GlobalProtect Gateway as shown on the diagram. That IP address I have setup on the Captive Portal config (redirect section) of our device that is shown as the MFA Gateway on the diagram.
... View more
03-07-2018
01:33 PM
Article I am using for setup: https://www.paloaltonetworks.com/documentation/80/globalprotect/globalprotect-admin-guide/authentication/configure-globalprotect-to-facilitate-multi-factor-authentication-notifications.html
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-12-2023
08:21 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks