About CHKlomp

CHKlomp

My customer has two data centers with GP access. What is the best way to make this a redundant setup and have the GP client prefer to access the closed DC and fail-over to the other DC, in case the preferred DC becomes unavailable? Thank you for your time.

CHKlomp

My customer has a PA-3020 setup for GP. Now they want their branch PA-500 enabled for GP as well, so users can connect direct for access to the branch resources. I cannot find any spec's about the usage limit for GP on a PA-500. Anyone has a ballpark what to expect? 20, 50 or 100 users? Thanks all!

CHKlomp · ‎02-27-2020

GP client was set to save both username and password. Customer wanted to have this changes to no-longer save the password. I changed the client config settings to "save username only", but the user is still not asked to enter their credentials. Do we need to remove the saved password by any means?

CHKlomp · ‎09-17-2019

Thanks @BPry It's what I was suspecting. Just wanted to make sure I did not miss any options...

CHKlomp · ‎09-16-2019

We're setup to email threat alerts, and are getting an email for every alert generated. Is there a way to throuttle the emails? Particularly for a single threat that is blocked, we don't need 60 emails/min for all the blocks. It would suffice for the first 10 per 10 min interval. When you get the first 10 emails, you know someone is hammering your system. It suffices to know that in 10 min, they are still at it, if they would be... Or is this more SIEM territory? Thank you, Chris Klomp

CHKlomp · ‎03-13-2019

Thanks for the clarification. I've always thought it was from the f/w's perspective. If it's from the Client's perspective, then it makes sense.

CHKlomp · ‎03-13-2019

Thanks for the tip. We had a profile setup, but this source address was not on the allowed list. It's curious why it would count send packets though.?! Lesson learned!

CHKlomp · ‎03-12-2019

If you cannot use the fqdn, I would create an address group with all the possible IP's the fqdn resolves to and use that as the destination. (If it changes so rapidly, I presume it's for load balancing and the number of IP's will be limited...)

CHKlomp · ‎03-12-2019

I've allowed ping traffic from an external source to the outside interface IP. When they try to ping the firewall, I see allow traffic on the correct rule, but it only shows a send count >0 and the receive count remains 0. Also they report they do not receive the responses. How is this explained? I would expect to see a receive count to be at least equal or greater than the send count... Thank you.

CHKlomp · ‎01-11-2018

I found: [quote] For firewalls that have direct internet access, Panorama automatically performs a daily check-in with the licensing server, retrieves license updates and renewals, and pushes them to the firewalls. The check-in is hard-coded to occur between 1 and 2 A.M.; you cannot change this schedule. [/quote] I also wonder why it's considered a HIGH severity notification?

Date Registered	‎10-03-2016 09:52 AM
Date Last Visited	2 weeks ago
Total Messages Posted	10
Total Likes Received	1

Online Status	Offline
Date Last Visited	2 weeks ago

About CHKlomp

GlobalProtect Connect to one of two data centers

GP on PA-500 how many users?

GP saved password removal

Re: Threat email alert throttling

Threat email alert throttling

Re: Receive ping count 0

Re: Receive ping count 0

Re: URL Category in Security Policy only for http?

Receive ping count 0

Re: Deployment job update licenses

GlobalProtect Connect to one of two data centers

GP on PA-500 how many users?

GP saved password removal

Re: Threat email alert throttling

Threat email alert throttling

Re: Deployment job update licenses

Re: GlobalProtect Connect to one of two data centers

Re: GP on PA-500 how many users?

Re: Error: Certificate failed to load: invalid certificate chain

Re: Error: Certificate failed to load: invalid certificate chain

Strata

Prisma

Cortex

About CHKlomp