Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About PerTenggren
About PerTenggren
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
09-10-2019
13Posts
3Likes
3Solutions
Sep 10, 2019Last Visited
User
Activity
User
Profile
Latest posts by PerTenggren
| Subject | Views | Posted |
|---|---|---|
| 1029 | 09-27-2017 01:01 AM | |
| 1043 | 09-19-2017 02:39 AM | |
| 1051 | 09-19-2017 01:44 AM | |
| 1058 | 09-19-2017 12:02 AM | |
| 1880 | 05-04-2017 12:59 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 03-16-2017 02:36 PM | |
| 2 | 05-04-2017 12:59 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 |
User Badges
Public Statistics
| Date Registered | 12-23-2016 04:22 AM |
| Date Last Visited | 09-10-2019 12:41 PM |
| Total Messages Posted | 15 |
| Total Likes Received | 3 |
09-19-2017
02:39 AM
RADIUS will provide a token from SecureID, othwise it's not a second factor compare to username/password.
... View more
09-19-2017
01:44 AM
Ok, is it possible to have multiple portals with the same IP but different FQDNs? " also.. not sure why you would mix 2 factor radius with username password...." - I don't really understand this statement/question. PAN don't support native SecureID, that's why radius.
... View more
09-19-2017
12:02 AM
Hi! I've a scenario where the authentication methods needs to be different for some users connecting via Global Protect. Basically two options needs to be supported: Certificate + username/password (LDAP) – Internal users Username/password (LDAP) + 2FA (RADIUS) – External users (consultants etc.) How can this be setup with PAN?
... View more
05-04-2017
12:59 AM
2 Kudos
Found the issue, the User-ID service was not enabled on the interface used for redirection. FYI, it not needed to set the NTML parameters on the firewall if Windows User-ID agent are used. It will act as a proxy for such request.
... View more
05-03-2017
11:15 PM
OK, I thought the User-ID Agent (external) acted as a proxy between the firewall and the domain controllers. Never the less, I’ve added the NTLM configuration on the firewall but still no luck. What I noticed is that the firewall do not join the domain. Can that be forced somehow?
... View more
05-02-2017
09:17 AM
It's IE yes, new installation. Do I really need to do that when using external User-ID servers?
... View more
04-25-2017
02:22 AM
Hi all, I'm facing an issue with captive portal and NTLM. The SSO (NTLM) fails and the users must enter the credentials via the web-form. I've attached print screens from Wireshark and the output from the userid.log: PAN-OS: 8.0.1 User-ID Agent: 8.0.1-21 [2017/04/25 11:07:48, 0] utils/ntlm_auth.c:get_winbind_netbios_name(172) could not obtain winbind netbios name! 2017-04-25 11:07:48.411 +0200 Error: pan_ntlm_handleType3Msg(pan_user_id_l3svc_ntlm.c:567): NTLM Auth failure for user got\pete vsys 1
... View more
04-05-2017
02:36 AM
Looks like Windows create a strange char in the beginning of the file. (<U+FEFF>) The order does not matter or how many entries I put in the list. As long as the IP-numbers begins at line 2 all works perfect. vsys1/EdgeIT-IP: Next update at : Wed Apr 5 11:33:57 2017 Source : Referenced : Yes Valid : Yes Auth-Valid : Yes Total valid entries : 1 Total invalid entries : 1 Valid ips: 10.0.2.0/24 Invalid ips: <U+FEFF>10.0.1.0/24
... View more
04-04-2017
09:20 AM
Hi, Not sure I understand where to put this ; Just to clarify, the last example works and both subnets shows up in the list.
... View more
04-04-2017
07:50 AM
Hi, trying to create an dynamic IP-List (EDL) including two subnets: 10.0.1.0/24 10.0.2.0/24 The firewall downloads the list but displays the following error "Valid entries(1) lines skipped(1)" and when I display the list only 10.0.2.0/24 shows up. If I add an comment at the very top of the list it all works. Can anyone explain why? #My list 10.0.1.0/24 10.0.2.0/24 Valid entries(2) lines skipped(1)
... View more
- Tags:
- edl dynamic list
03-16-2017
02:36 PM
1 Kudo
After further investigation it seems that EDL created as "shared" can't list any certificate profile, but it works if assigning the EDL to a specific device group.
... View more
03-16-2017
12:48 PM
Hi all, I just ran into an issue while creating an External Dynamic List in Panorama 8.0. The source is a HTTPS address that requries a certificate profile for validation, so far so good. The problem is that I can't select any certificate profile, the list is empty. There's a certificate profile created under Device > Certificate Management > Certificate Profile for a template. Any suggestion what can be wrong or how to do this in a correct way? Br, Per Tenggren
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-10-2019
12:41 PM
|
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
