This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About PerTenggren
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About PerTenggren
09-10-2019
15Posts
4Likes
3Solutions
Sep 10, 2019Last Visited
User
Activity
User
Profile
Latest posts by PerTenggren
| Subject | Views | Posted |
|---|---|---|
| 2621 | 09-27-2017 01:01 AM | |
| 2635 | 09-19-2017 02:39 AM | |
| 2786 | 09-19-2017 01:44 AM | |
| 2856 | 09-19-2017 12:02 AM | |
| 4361 | 05-04-2017 12:59 AM | |
| 4006 | 05-03-2017 11:15 PM | |
| 4300 | 05-02-2017 09:17 AM | |
| 4402 | 04-25-2017 02:22 AM | |
| 4452 | 04-05-2017 02:36 AM | |
| 4375 | 04-04-2017 09:20 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 Likes | 03-16-2017 02:36 PM | |
| 2 Likes | 05-04-2017 12:59 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 12-23-2016 04:22 AM |
| Date Last Visited | 09-10-2019 12:41 PM |
| Posts | 15 |
| Total Likes Received | 4 |
09-19-2017
02:39 AM
RADIUS will provide a token from SecureID, othwise it's not a second factor compare to username/password.
... View more
09-19-2017
01:44 AM
Ok, is it possible to have multiple portals with the same IP but different FQDNs? " also.. not sure why you would mix 2 factor radius with username password...." - I don't really understand this statement/question. PAN don't support native SecureID, that's why radius.
... View more
09-19-2017
12:02 AM
Hi! I've a scenario where the authentication methods needs to be different for some users connecting via Global Protect. Basically two options needs to be supported: Certificate + username/password (LDAP) – Internal users Username/password (LDAP) + 2FA (RADIUS) – External users (consultants etc.) How can this be setup with PAN?
... View more
05-04-2017
12:59 AM
2 Kudos
Found the issue, the User-ID service was not enabled on the interface used for redirection. FYI, it not needed to set the NTML parameters on the firewall if Windows User-ID agent are used. It will act as a proxy for such request.
... View more
05-03-2017
11:15 PM
OK, I thought the User-ID Agent (external) acted as a proxy between the firewall and the domain controllers. Never the less, I’ve added the NTLM configuration on the firewall but still no luck. What I noticed is that the firewall do not join the domain. Can that be forced somehow?
... View more
05-02-2017
09:17 AM
It's IE yes, new installation. Do I really need to do that when using external User-ID servers?
... View more
04-25-2017
02:22 AM
Hi all, I'm facing an issue with captive portal and NTLM. The SSO (NTLM) fails and the users must enter the credentials via the web-form. I've attached print screens from Wireshark and the output from the userid.log: PAN-OS: 8.0.1 User-ID Agent: 8.0.1-21 [2017/04/25 11:07:48, 0] utils/ntlm_auth.c:get_winbind_netbios_name(172) could not obtain winbind netbios name! 2017-04-25 11:07:48.411 +0200 Error: pan_ntlm_handleType3Msg(pan_user_id_l3svc_ntlm.c:567): NTLM Auth failure for user got\pete vsys 1
... View more
04-05-2017
02:36 AM
Looks like Windows create a strange char in the beginning of the file. (<U+FEFF>) The order does not matter or how many entries I put in the list. As long as the IP-numbers begins at line 2 all works perfect. vsys1/EdgeIT-IP: Next update at : Wed Apr 5 11:33:57 2017 Source : Referenced : Yes Valid : Yes Auth-Valid : Yes Total valid entries : 1 Total invalid entries : 1 Valid ips: 10.0.2.0/24 Invalid ips: <U+FEFF>10.0.1.0/24
... View more
04-04-2017
09:20 AM
Hi, Not sure I understand where to put this ; Just to clarify, the last example works and both subnets shows up in the list.
... View more
04-04-2017
07:50 AM
Hi, trying to create an dynamic IP-List (EDL) including two subnets: 10.0.1.0/24 10.0.2.0/24 The firewall downloads the list but displays the following error "Valid entries(1) lines skipped(1)" and when I display the list only 10.0.2.0/24 shows up. If I add an comment at the very top of the list it all works. Can anyone explain why? #My list 10.0.1.0/24 10.0.2.0/24 Valid entries(2) lines skipped(1)
... View more
- Tags:
- edl dynamic list
03-16-2017
02:36 PM
2 Kudos
After further investigation it seems that EDL created as "shared" can't list any certificate profile, but it works if assigning the EDL to a specific device group.
... View more
03-16-2017
12:48 PM
Hi all, I just ran into an issue while creating an External Dynamic List in Panorama 8.0. The source is a HTTPS address that requries a certificate profile for validation, so far so good. The problem is that I can't select any certificate profile, the list is empty. There's a certificate profile created under Device > Certificate Management > Certificate Profile for a template. Any suggestion what can be wrong or how to do this in a correct way? Br, Per Tenggren
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-10-2019
12:41 PM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks