About ESutedy

Followed that article to the "T" and both my UA and PROD upgrades went without a hitch from 4.0.3 to 4.0.4. Thanks for sharing that link! ... View more

You can select multple agents on the agent monitor page and delete them. You could create a filter to list specific agents, say disconnected agents older than X days, select all and then delete them. However, if it's more than a few pages of return data the process will error out. Something Palo needs to correct.   I had a similar issue where I wanted to bulk delete agents in my UA environment. i had to open a support case and work with an engineer to build our a special SQL query to take care of this. ... View more

I logged the same request as a bug under 4.0.1 a while back and was advised that it would be addressed in a future version, so I expect that it is on a road-map somewhere.   Much as I can work with m/d/y formatting, it's nice to have the d/m/y formatting that we are used to and have with our other products, like Windows, McAfee, SQL, Office, SAP, Exchange (ok - maybe not so much Exchange - backend Powershell prefers m/d/y). ... View more

Hi Esutedy,   In this situation it may be better to remove the exchange servers from user-id monitoring but I don't know enough about how your user-id and environment set-up to see if that would be the best solution.   As always, I find the best way of doing user-id is using GlobalProtect. Not for the VPN side of it but for internal host detection as this will always identify the correct user and authenticated to the internal gateway on the firewall.   hope this helps, Ben ... View more

I confirm that LDAP CRL works as well.   I revoked a certificate from CA and deny re-enrollment.   When trying to connect to the GP Portal with the revoked cert - the client is showing "Required client certificate is not found" ... View more

Hi @acc6d0b3610eec313831f7900fdbd235,   I am after the preference list of the Traps settings.   For example, for some reason if we need to change the server name or enable/disable SSL, we can use Configuration Profile to set it or run defaults write to override the current settings.   Most of the applications have plist where you can modify the App settings according to your environment.   Thanks ... View more

GP 4.0 The computer had a working GP version 2.1 and then we upgraded to GP 4.0 and it failed to create the network adapter. ... View more