This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About eugenep
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About eugenep
07-12-2018
41Posts
3Likes
0Solutions
Jul 12, 2018Last Visited
User
Activity
User
Profile
Latest posts by eugenep
| Subject | Views | Posted |
|---|---|---|
| 1545 | 05-06-2018 09:17 PM | |
| 3363 | 12-10-2017 03:01 PM | |
| 3534 | 11-22-2017 10:54 PM | |
| 3547 | 11-20-2017 04:32 PM | |
| 3615 | 11-14-2017 06:49 PM | |
| 3553 | 08-22-2017 08:03 AM | |
| 3565 | 08-22-2017 04:09 AM | |
| 3247 | 05-22-2017 02:23 AM | |
| 3258 | 05-22-2017 01:59 AM | |
| 1509 | 10-12-2015 11:43 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 11-14-2017 06:49 PM | |
| 1 Like | 06-02-2015 01:18 AM | |
| 1 Like | 08-15-2013 12:26 AM |
User Badges
Community Statistics
| Member Since | 10-17-2012 06:07 PM |
| Date Last Visited | 07-12-2018 04:16 AM |
| Posts | 41 |
| Total Likes Received | 3 |
05-06-2018
09:17 PM
Hi All, We're collecting user mappings from multiple sources, AD/Exchange, XML-API and Captive Portal and we've just set up User-ID redistribution to share it among various VSYS'. All seems to be going well and user mappings created via AD/Exchange and the XML-API are properly being redistributed except for the user mappings created via the Captive Portal. Does anyone know why that may be the case? The documentation for 8.0 says "You can redistribute user mapping information collected through any method except Terminal Services (TS) agents." so in theory it should be doable. https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/user-id/deploy-user-id-in-a-large-scale-network/redistribute-user-mappings-and-authentication-timestamps Thanks, Eugene
... View more
12-10-2017
03:01 PM
Yep, looks good. Thanks for letting me know.
... View more
11-22-2017
10:54 PM
Thanks again @reaper
... View more
11-20-2017
04:32 PM
Hi @reaper This is still showing up as untrusted. Is anyone planning to fix this up soon? Eugene
... View more
11-14-2017
06:49 PM
1 Kudo
If you have a decryption policy in place to block access to untrusted sites, the case management portal https://supportcases.paloaltonetworks.com, is blocked because the certificate chain has not been set up properly. https://www.ssllabs.com/ssltest/analyze.html?d=supportcases.paloaltonetworks.com I have tested this from Sydney, Australia and Los Angeles, USA, both resolve to different IP addresses but both are exhbiting the same issue. Do I raise this a standard support case? Thanks, Eugene
... View more
08-22-2017
08:03 AM
Hi Reaper, Thanks for your reply. I thought that was the case but it didn't seem that way from what could I see. I had also encountered other routing issues at the time, which are still being investigated by TAC, which could have contributed to the issue. - Eugene
... View more
08-22-2017
04:09 AM
My appliance is associating the wrong zone to an ip address. It was picking the correct zone but then stopped. Does any one know why that would be the case and to get it back into the correct zone? I'm running PAN OS 8.0.4. Thanks, Eugene
... View more
05-22-2017
02:23 AM
Thanks @kiwi, I will ask my SE now to do that for me. Regards, Eugene
... View more
05-22-2017
01:59 AM
Hi, I'm setting up two PA5250s in HA and are connecting them up directly to each other. Since these are point-to-point links, i tried using a /31-bit subnet mask, as that is our usual norm for point-to-point links as per RFC3201. Does anyone know why you can't use a /31 for this when they're directly connected to each other? Thanks, Eugene
... View more
10-12-2015
11:43 PM
Hi all,
Is it possible to get an interface to respond to the TCP Echo Service on Port 7 via a management profile or some other way?
I don't mean a ICMP echo request (Ping) but what's described here
https://en.wikipedia.org/wiki/Echo_Protocol
https://tools.ietf.org/html/rfc862
I have an appliance that tests network connectivity by using this against its gateway which is an interface on the PAN unit.
Thanks,
Eugene
... View more
06-23-2015
06:24 PM
Yes, I've read the help documentation. Does that include the fact that there are no sessions available? Is a session in this context, considered a resource?
... View more
06-23-2015
06:06 PM
We'd like to drop any new SSL sessions if the system has reached the SSL Decrypted Session Limit. This page, How to Implement and Test SSL Decryption, says to run: > set deviceconfig setting ssl-decrypt deny-setup-failure yes but it doesn't seem to be there in version 6.1.4 In the Web UI, there is an option under when creating a Decryption Profile, to "Block sessions if resources not available". Is that the same thing? Thanks, Eugene
... View more
Labels:
- Labels:
-
Configuration
06-02-2015
01:18 AM
1 Kudo
This issue isn't present on 6.0.9 or 6.1.4. I opened a case with PAN Support while we were on 5.0.14 and had this issue, and all they kept coming back to me was that 5.0.X doesn't support TLS1.2 and sent me to a link of their support cipher pages. I told them it wasn't related to that as I forced Firefox to only use TLS1.1 and disabled the unsupported ciphers and was still getting the same problem. I was getting no where. In the end, we needed to move to 6.x anyway to use some of the new features.
... View more
07-28-2014
09:30 PM
Thanks csharma. That still seems to be a count of the overall bytes in not the active/current rate. When I look at that value it just keeps rising and I doubt I can have an active bitrate of <ibytes>17992771529714</ibytes>. Thanks anyways.
... View more
07-25-2014
12:16 AM
Hi, How can I get the current bitrate of a logical interface at the time its queried via the API or CLI? I've tried 'show interface tunnel.x' but that shows be the overall counters for that interface. I know it can be done as Pan(w)achrome displays that information. When I click on the birate speed in Pan(w)achrome it shows me 'tunnel.x.ibytes.rate', I just don't know where it's getting that from. Will someone be able to help me. Thanks, Eugene
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
07-12-2018
04:16 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks