This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies. For details on cookie usage on our site, read our Privacy Policy
Yes. I am sure because I ran into similar issues like it and fixed it. But this time with DNS Proxy nothing seems to work regardless which interface I use. I suspect that there is a sync problem between Panorama and the firewall device because I created a tunnel and loopback interface within Panorama but only partial configs was pushed to the firewall device. I am not sure how or where I can go to find what items are synced between Panorama and the firewall.
... View more
I am starting to build a clientless vpn setup, but I am getting errors when building a DNS Proxy and DNS Server Profile. I get this error msg. I tried ethernet, tunnels and loopback interfaces and they all failed. I tried following the instructions but i get the same error message. Does it matter if use the a loopback or tunnel interface? all of them are set for "layer 3". not sure why its calling it "invalid". Details: Validation Error: dns-proxy -> DNS-Proxy -> interface 'loopback.998' is not a valid reference dns-proxy -> DNS-Proxy -> interface is invalid No DNS default obj found (Module: dnsproxyd) Commit Failed. https://docs.paloaltonetworks.com/globalprotect/8-1/globalprotect-admin/globalprotect-clientless-vpn/configure-clientless-vpn.html https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/dns/configure-a-dns-proxy-object https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/dns/configure-a-dns-server-profile.html#id658a61ea-eaab-45b5-993c-8a891a802435
... View more
Not sure how I resolved my own problem, but i basically redownloaded GlobaPortect Data File from Dynamic Updates in Panorama (but it still failed) and then I went to the HIP profile, remove all specifications (e.g. windows 10..etc). That way my HIP profile will accept anything. I committed it and things started to work.. I was seeing HIP matches and etc.. I then went back to the HIP profile and put back some of my specifications and things continue to work. I am not really sure why is working now but it is.
... View more
yes.. I put the check for hip collection, yesterday but it didn't make a difference. It should be a simple setup but not sure why HIP is not working. Its almost as if the client/computer is not sending HIP information to PA. My HIP Profile is looking for any Windows OS, and I am running Windows 10 Enterprise so the HIP Profile should match.
... View more