Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About Besfort
About Besfort
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
06-15-2020
22Posts
5Likes
0Solutions
Jun 15, 2020Last Visited
User
Activity
User
Profile
Latest posts by Besfort
| Subject | Views | Posted |
|---|---|---|
| 256 | 06-01-2016 01:09 AM | |
| 847 | 08-03-2015 04:24 AM | |
| 926 | 07-31-2015 06:41 AM | |
| 1681 | 09-02-2014 08:30 AM | |
| 1681 | 09-02-2014 07:49 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 08-18-2014 03:05 AM | |
| 1 | 08-20-2014 08:19 AM | |
| 1 | 08-14-2014 07:42 AM | |
| 1 | 08-29-2014 02:23 AM | |
| 1 | 08-15-2014 07:53 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 2 | |||
| 2 | |||
| 2 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 08-14-2014 12:57 AM |
| Date Last Visited | 06-15-2020 08:25 AM |
| Total Messages Posted | 22 |
| Total Likes Received | 5 |
06-01-2016
01:09 AM
Hi,
How can we remove the configuration done on PAN by other admin, which has not been yet committed, but shows up on the configuration locks?
Best regards,
B.
... View more
08-03-2015
04:24 AM
Thanks Ben! I was looking for videos from third party trainers, like we have for Cisco, Juniper etc. Regards, B.
... View more
07-31-2015
06:41 AM
Hi, Does anyone know good training videos for PAN Firewall? Thanks, B.
... View more
09-02-2014
08:30 AM
Yes that interface is connected to FastEthernet, but the other one was in GigabyteEthernet. However the problem with half duplex was because the interface was in VWire and in order to work in fullduplex both VWire interfaces had to be configured for fullduplex. It is strange though that Link Duplex Auto goes to Half by default. thanks everyone for comments and suggestions.
... View more
09-02-2014
07:49 AM
in one side is the Cisco switch with this config: ! interface FastEthernet0/2 switchport mode trunk speed 100 duplex full spanning-tree portfast trunk ip dhcp snooping trust ! on the other side PAN has this config: X@PA-500> show interface ethernet1/4 Link status: Runtime link speed/duplex/state: 100/half/up Configured link speed/duplex/state: auto/full/up even though it is configured to full duplex, it goes to half.
... View more
09-02-2014
07:27 AM
the other side in one interface is 100/full duplex and the other 1000/full duplex
... View more
09-02-2014
07:15 AM
Hi, I was getting complains for slow download speed, so I tried to change the speed setting on interface from auto to 1000, but the interface went down. Link status: Runtime link speed/duplex/state: unknown/unknown/down Configured link speed/duplex/state: 1000/auto/up when I set it back to auto, it goes half duplex and speed 100 Link status: Runtime link speed/duplex/state: 100/half/up Configured link speed/duplex/state: auto/auto/up thanks, B
... View more
09-01-2014
05:39 AM
hi, is it possible to group the users for a specific security policy, as in pic below, so it will look better Thanks, B.
... View more
08-29-2014
02:23 AM
1 Kudo
thank you Hulk!
... View more
08-29-2014
01:52 AM
hi, I've applied web filtering where I blocked ulr categories such as peer-to-peer, games etc, but in traffic logs it appears that it is allowed: peer-to-peer url category: and same with games category: But it is also showing that it is blocking those categories on Logs>URL Filtering. is this only for the first few sites that are allowed until FW understands the category of the url?? thanks, b.
... View more
08-20-2014
08:19 AM
1 Kudo
Below is the answer for Native VLAN: Setting a VLAN as a native VLAN on Cisco turns off tagging. The PAN device has no concept of "Native VLAN". The logical interface assigned to the physical interface would be the interface to accept untagged vlans. If the following interfaces are created: Eth1/1 ---- Untagged Traffic Eth1/1.100 --- Tagged with VLID = 100 Eth1/1.200 --- Tagged with VLID = 200 On the Cisco switch configure VLAN 200 to be the "Native VLAN", then the packets exiting the switch would have no tag. These packets would enter the PAN device on Eth1/1 because it is expecting untagged traffic. owner: skrall Native VLAN Configuration
... View more
08-18-2014
05:17 AM
OK it's a misconfiguration on my network, because it doesn't make sense to have two different vlans. It wont work even with the router, but router in this case is using the Native Vlan to accept all untagged traffic. Regards, B
... View more
08-18-2014
12:43 AM
Hi, I wanted to apply a virtual wire between two sub-interfaces 1.10 and 2.20, which are basically in two different VLAN ID (10 and 20), but I'm getting an error saying that sub-interfaces cannot have interfaces with different VLAN (10/20). Is this the default behavior for virtual wire, or am I missing something? Thanks, -B
... View more
- Tags:
- virtual-wire
- vlans
08-18-2014
12:19 AM
Yes I had asymmetrical routing, and Firewall was blocking the returned traffic. In my case the asymmetrical routing was due to using two internet connections/ISP, one as a default gateway and the other for publishing some web applications. I have to apply PBR on the router in order for the web server replies to go through the same ISP as the request came, but for know the non-syn tcp solved the issue.
... View more
08-15-2014
07:53 AM
1 Kudo
Hi Lancen, May be you have solved your issue, if not try to disable non-syn reject because that did the trick for me. You can disable it by creating a new Zone Protection profile (in Network -> Network Profiles). In the new profile set the "Reject Non-SYN TCP" to no. Apply this zone profile to your internal zone. Regards,
... View more
08-14-2014
07:42 AM
1 Kudo
Thanks a lot ajbool, it is working . I had to apply it on the internal zone. Regards, -B
... View more
08-14-2014
07:30 AM
Hi Dave, Thanks for the reply, I was missing that tick box . It is OK now, no warnings. Regards, B
... View more
08-14-2014
06:19 AM
Hi, I've deployed PA-500 recently, and I'm experiencing an interesting situation. PA-500 is deployed in virtual-wire, and I'm filtering only my main ISP connection (ISP 1). The connection for ISP 2 goes directly to the router. We have a web server, which accepts requests from users through ISP2, and replies back but the router sends the replies through ISP1 (as it is the default connection). This returned traffic is block from PA-500, even though I applied a policy rule to allow everything from inside to outside. Please if you can provide a solution to this issue. Below is a diagram visualizing the problem.
... View more
08-14-2014
01:16 AM
Hi everyone, I wanted to do user based filtering on PA-500, but after I've successfully connected PA with active directory, and applied a security policy on user based I get this warning: Warning: Rulebase 'security' Rule 'LAN-r2'; Zone 'LAN' does not have 'enable-user-identification' turned on. Does anyone know how to enable user identification?
... View more
Labels:
- Labels:
-
User-ID
Latest Blogs
Copyright 2007 - 2020 - Palo Alto Networks
