This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
About tigeli
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Announcements
We are conducting regularly scheduled maintenance over the weekend, which could cause some downtime on LIVEcommunity. We apologize for any inconvenience.
- LIVEcommunity
- About tigeli
06-16-2022
10Posts
4Likes
1Solution
Jun 16, 2022Last Visited
User
Activity
User
Profile
Latest posts by tigeli
| Subject | Views | Posted |
|---|---|---|
| 588 | 04-16-2022 12:01 PM | |
| 2832 | 03-29-2021 04:26 AM | |
| 2912 | 03-26-2021 01:45 PM | |
| 5188 | 12-20-2020 11:07 PM | |
| 2316 | 12-08-2020 11:43 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 Likes | 04-16-2022 12:01 PM | |
| 1 Like | 03-26-2021 01:45 PM | |
| 1 Like | 01-02-2019 05:08 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 02-23-2017 12:13 AM |
| Date Last Visited | 06-16-2022 06:20 AM |
| Posts | 10 |
| Total Likes Received | 4 |
04-16-2022
12:01 PM
2 Kudos
According to the 10.1 and 10.2 documentation plain serial number is still enough to register devices on the portal but.. it is not. Engineering made undocumented change to the product.. I have no problem with the change itself but it would be nice this would have been documented in the "changes to default behaviour" and in the product documentation itself how to register satellites to the portal. --cut-- Prior to PAN-OS 10.1, the GP LSVPN Portal would register and authenticate the GP LSVPN Satellite either based on the Serial Number or Authentication Profile (username/password credentials) To enhance the security for GP LSVPN Satellite registration and authentication, PAN-OS 10.1 added the Satellite Cookie Validation mechanism that uses both the Serial Number and Authentication Profile (username/password credentials) to register and authenticate the GP LSVPN Satellite. --cut--
... View more
03-29-2021
04:26 AM
@sebastianvd Well.. clients behind NAT will fallback to SSL and with -66 release IPsec still works without fallback.
... View more
03-26-2021
01:45 PM
1 Kudo
Lots of stuff got fixed but they also broke IPsec connectivity over IPv4 (NAT) and IPv6 on macOS, 5.2.5-84 falls back to SSL with those (rolling back to 5.2.5-66 works ok). IPv4 without NAT works with IPsec with -84.. I guess there's no QA team. 😄
... View more
12-20-2020
11:07 PM
@mdepalmaevr you don't really need to set LogonFlag + LogonState on the registry if you do the installation with ' msiexec /i "GlobalProtect64-5.2.4.msi" /q PORTAL=fqdn.address PRELOGON=1'. At least this works for me without additional hustle.
... View more
12-08-2020
11:43 PM
@Sec101 at least I could reproduce the issue on Safari, Chrome and Firefox.
... View more
12-08-2020
02:42 AM
I started seeing this on today with 9.1.6. Not just on Google but almost every site using http/2.
... View more
01-02-2019
05:08 PM
1 Kudo
It seems that this is caused by the optimized split tunneling feature (domain, https://docs.paloaltonetworks.com/globalprotect/4-1/globalprotect-app-new-features/new-features-released-in-gp-agent-4_1/split-tunnel-for-public-applications.html) when the configuration includes the AD-domain (eg. *.domain.ltd) to be routed over the VPN tunnel.
... View more
01-02-2019
03:54 PM
Just noticed that with Globalprotect 4.1.x the network profile changes to from "Public" or "Private" to "Domain network" for physical network adapter and not just for the VPN adapter while being connected to GlobalProtect service. Also when the VPN session is disconnected the physical adapter profile does not change but instead stays as "Domain network"-profile. On 4.0.x this does not happen. This is clearly a security issue as one can have different firewall rules for Public/Private/Domain network profiles and having "Domain network"-profile being assigned to network adapter connected directly to Internet is not something I would want. I did not found any documentation for such a behavioural change in the documentation. Anyone else having this issue? GP 4.0.8 GP 4.1.8
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-16-2022
06:20 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks