Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About mypasecure2017
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About mypasecure2017
01-22-2021
8Posts
0Likes
1Solution
Jan 22, 2021Last Visited
User
Activity
User
Profile
Latest posts by mypasecure2017
| Subject | Views | Posted |
|---|---|---|
| 1864 | 12-16-2019 03:47 PM | |
| 1952 | 12-13-2019 12:05 PM | |
| 1966 | 12-13-2019 09:27 AM | |
| 5193 | 12-13-2019 09:17 AM | |
| 5395 | 12-06-2019 12:44 PM |
User Badges
Community Statistics
| Member Since | 02-14-2017 06:56 AM |
| Date Last Visited | 01-22-2021 11:05 AM |
| Posts | 8 |
12-16-2019
03:47 PM
Yes. I am sure because I ran into similar issues like it and fixed it. But this time with DNS Proxy nothing seems to work regardless which interface I use. I suspect that there is a sync problem between Panorama and the firewall device because I created a tunnel and loopback interface within Panorama but only partial configs was pushed to the firewall device. I am not sure how or where I can go to find what items are synced between Panorama and the firewall.
... View more
12-13-2019
12:05 PM
btw..I get the error as I commit to Template from Panorama.
... View more
12-13-2019
09:27 AM
I am starting to build a clientless vpn setup, but I am getting errors when building a DNS Proxy and DNS Server Profile. I get this error msg. I tried ethernet, tunnels and loopback interfaces and they all failed. I tried following the instructions but i get the same error message. Does it matter if use the a loopback or tunnel interface? all of them are set for "layer 3". not sure why its calling it "invalid". Details: Validation Error: dns-proxy -> DNS-Proxy -> interface 'loopback.998' is not a valid reference dns-proxy -> DNS-Proxy -> interface is invalid No DNS default obj found (Module: dnsproxyd) Commit Failed. https://docs.paloaltonetworks.com/globalprotect/8-1/globalprotect-admin/globalprotect-clientless-vpn/configure-clientless-vpn.html https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/dns/configure-a-dns-proxy-object https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/dns/configure-a-dns-server-profile.html#id658a61ea-eaab-45b5-993c-8a891a802435
... View more
12-13-2019
09:17 AM
Not sure how I resolved my own problem, but i basically redownloaded GlobaPortect Data File from Dynamic Updates in Panorama (but it still failed) and then I went to the HIP profile, remove all specifications (e.g. windows 10..etc). That way my HIP profile will accept anything. I committed it and things started to work.. I was seeing HIP matches and etc.. I then went back to the HIP profile and put back some of my specifications and things continue to work. I am not really sure why is working now but it is.
... View more
12-06-2019
12:44 PM
yes.. I put the check for hip collection, yesterday but it didn't make a difference. It should be a simple setup but not sure why HIP is not working. Its almost as if the client/computer is not sending HIP information to PA. My HIP Profile is looking for any Windows OS, and I am running Windows 10 Enterprise so the HIP Profile should match.
... View more
12-06-2019
11:09 AM
Anyone have any clue why HIP is not working for me? I get no show output, no HIP matches, nothing. I do have a valid GP Gateway subscription which is why I am building this HIP requirement.
... View more
12-05-2019
04:01 PM
I have Global Protect VPN configured and everything is working, but the moment I apply a HIP-Profile to my security rule (for my VPN Users), they immediately do not match my VPN security rule. I get no HIP logs, I cannot find any hip profiles. I configured a HIP Profile, to match any Windows operating system, so I kept it simple. I can remove the HIP Profile from the security rule, then my VPN users will match the rule and everything is fine. But the moment I apply the HIP Profile to the security rule, the traffic will not match the rule. I am configuring the firewall via Panorama console. I feel like its a simple fix and I am overlooking a simple HIP configuration/requirement. I tried the following articles but they all failed to fix my issue or I cannot obtain any results from the show/debug commands. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClshCAC https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boP1CAI https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClbkCAC username@IFW-01> debug user-id dump hip-profile-database entry Total number of hipmask in database: 0 Total number of logout records in database: 0 Total size of hip reports: 1024KB used / 34816KB No record exists or matches! username@IFW01> debug user-id dump hip-profile-database ipmapping Total number of ipmappings in database: 0 No record exists or matches!
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
01-22-2021
11:05 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
