LIVEcommunity - About k.dimitrovski

k.dimitrovski · ‎12-12-2017

I faced the same problem on PA-3050 with PAN-OS 7.1.13 and resolved it by running: > request wildfire downgrade install previous Probably the wildfire update messed up something.

k.dimitrovski · ‎05-09-2012

I've been getting this error for a user on our Captive portal: User 'neoguest' failed authentication. Reason: User is in locked users list From: 172.16.10.100. I've searched how to unlock the user but I haven't found any info on that. Can anyone send some info on how to unlock this user because I tried deleting and recreating the same user but the error is still present. Best regards, Konstantin

k.dimitrovski · ‎04-09-2012

Hi, We had to change the username of one of our colleagues in the Active Directory. Now our appliance (PA-500 running 4.1.4) can see the changes but only in a strange way. When I try to create a rule with this user and I try to list the users with [domain]\ I can see only the old username (ana.cvetkovska), but when I try to list the users with [domain].com.mk\ I can see the new, changed username as it should be. Unfortunately, for access privileges the appliance uses the short version (all the logs show users in [domain]\[user] format) so we cannot give the user the privileges it needs. I've tries clearing ip-user mappings, even restarting the firewall, but the problem is still present. Any help would be appreciated. Attachments:

k.dimitrovski · ‎02-28-2012

Hi, I've recently upgraded our PA-500 to 4.1.3 and found that this version has significantly improved over the previous 4.0.X. But now I have few quirks that the new version brought up or didn't solve as I expected. First, after upgrading the NetConnect on one PC (outside of company and not in our domain, Windows 7 Ultimate SP1) to GlobalProtect 1.1.3 VPN client, the PC started to do auto login to the first local user (accidently without password) and every time I do Log Off or Switch User I get back to this user's desktop. To clarify, on this PC, I have two users, one Power User account without password (the one that does auto login) and one other Administrator account with password. I'm sure that GlobalProtect is the cause of the problem because every time I remove the client, login process goes back to normal. Second, I’ve been experiencing some dificulty with using the Apple AppStore from iOS devices when there is URL filtering enabled. Can anyone suggest which URL categories should be allowed/passed or some speciffic URLs added to exclude list for this Apple service to work properly? Thanks for any kind of help in advance!

k.dimitrovski · ‎01-18-2012

I had to do some changes to the Allow List of a Authentication Profile based on LDAP (AD) but i'm constantly recieving "ajaxUserIdAgentUserHandler:: Error in retrieving data: Not Found" I'm sure that this was working previously. Additionaly I've manually edited the configuration and reuploded to the FW and the user is authenticated and can connect to the VPN. I haven't noticed any other problems with LDAP and authentication. The device is PA-500 and it's running panos 4.0.8. Any ideas?

k.dimitrovski · ‎09-23-2011

Hi all, I have a problem with iTunes/AppStore on my PaloAlto firewall. We have a default rule for surfing with URL filtering applied (including online-music category). Every time I try to connect with a iOS device to AppStore the traffic is denied because it is categorized as online-music (i can see this in session browser). If I configure another rule before the default surfing rule with source: any, dest: any, app group apple (all available apple apps) and action: allow, then again the traffic is passed through the default surfing rule and the communication is denied. So this is not the sollution 😞 So I am asking, is there a sollution where I can keep my default surfing rule (with online-music URL filtered) and somehow allow traffic to iTunes and AppStore? Best regards, Konstantin

k.dimitrovski · ‎06-15-2011

We have the same issue here after upgrading. Could you specify what exaclty did you did to solve the problem. Did you saved locally the config, did the factory reset and uploaded the config? If I do these steps will the problem be back or not, after commiting the configuration?

k.dimitrovski · ‎06-08-2011

Sorry for posting before doing extensive search on the community. I found this aricle which explains everything just fine... https://live.paloaltonetworks.com/docs/DOC-1743

k.dimitrovski · ‎06-08-2011

I've just noticed this error in system logs: DP DDR0 ECC single 69, double 37, dimm 0, rank 1, bank 3, row 0x1434 column 0x300 and DP DDR0 ECC single 65, double 32, dimm 0, rank 1, bank 7, row 0xa5f column 0xf60 Is this memory error and what should I do to resolve this?

k.dimitrovski · ‎06-08-2011

Marcel , I actually did an Wireshark capture of the file transfer and it's over http (port 80). I can even see the following data when I do decode on the stream (to host du101w.dub101.mail.live.com - 94.245.116.7): Referer: http://msc.wlxrs.com/poBCDexPyDTmZU !g1!Ku5AkCPPjLAp!IHrxFrh9VuKRu7mzDkQY3SbPGkjTKUo4L/Microsoft.Live.Silverlight.HotmailUploader.xap Content-Length: 960997 Content-Type: application/x-www-form-urlencoded filename: HwQgBBUEFAQbBB4EEwQgACIEFQQlBB0EGAQnBBoEHgQgACAEFQQoBBUEHQQYBBUEIAAXBBAEIAARBBUEIgQeBB0ELgBwAGQAZgA= silverlightupload: true %PDF-1.5 %.... 1 0 obj <</Type/Catalog/Pages 2 0 R/Lang(mk-MK) >> endobj 2 0 obj <</Type/Pages/Count 9/Kids[ 3 0 R 19 0 R 31 0 R 38 0 R 41 0 R 44 0 R 50 0 R 53 0 R 55 0 R] >> endobj 3 0 obj <</Type/Page/Parent 2 0 R/Resources<</Font<</F1 5 0 R/F2 10 0 R/F3 12 0 R/F4 14 0 R>>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/MediaBox[ 0 0 595.32 841.92] /Contents 4 0 R/Group<</Type/Group/S/Transparency/CS/DeviceRGB>>/Tabs/S>> endobj 4 0 obj <</Filter/FlateDecode/Length 4242>> stream x..\[k,. ~?p.....w...`.f<;!!..9oK.r9..l.!....ERI..q.a9k...J%..O....._~y.O6L&<}.../.......O and at the end I can see: $p.OV....^.....V.|..x..v...."[;.;:.n...._2.....8E...y.m...y.Ywe...@C.....].9....^..(*...s...j.b.Q.}FpD............nb.. ,..cq<G/...Zd.pU..}...Zf...<..+.........k\^..yMIP9./IR..}.[2........,"#r-........S7E."..<.<g..m..&5}:@.p.....I....uG[...9.Z.....I*. .."..Mpx...g."....1.. endstream endobj 81 0 obj <</Type/XRef/Size 81/W[ 1 4 2] /Root 1 0 R/Info 58 0 R/ID[<8B702CF0E319FF4598A4B5ECC7CE03F2><8B702CF0E319FF4598A4B5ECC7CE03F2>] /Filter/FlateDecode/Length 289>> stream x.%..+.q....w..kH.....b......Zsr.2.7.......HJ.8hJ.Ejq.FrqP.EI)r.#.r.....>......~+U-.5....&)..Q.; .G....9...p.-e.-@...(.@[Fx..[pL....%.I......B.........u..(....|;c./.~i...L..1s...p........{......+.|.\'...).j..?.1.....#.........Zc.|......./.@Ac.1...5.&.... ...k.R.0..J...Z.D ..P.c..!aB...[D. endstream endobj xref So does this give you any valuable information? Best regards!

k.dimitrovski · ‎06-08-2011

I've tried to use the file blocking option to ban attachments on Hotmail. But it's not working on me. 1. Created file blocking profile for hotmail application, certain file types and chose both directions -> block. 2. Created security rule with my IP as a source and hotmail, ssl, web-browsing in applications (added these after the warning on commit), any service, action allow and the file blocking profile selected in Individual profiles... 3. The rule is on top, and if I chose block I can't browse the web, so this is the rule that "catches" my traffic. Tried and the attachments are working fine... Am I missing something? Any suggestions? Best regards, Konstantin

Member Since	‎08-05-2010 05:07 AM
Date Last Visited	‎11-25-2019 08:21 AM
Posts	11
Total Likes Received	6

Online Status	Offline
Date Last Visited	‎11-25-2019 08:21 AM

Re: Error in parsing xml response

Locked user list

Problem with AD authentication - username change

Couple of questions about GlobalProtect client and AppStore through PA500

Problem with Authentication Profile

Re: Error in parsing xml response

Locked user list

Re: MS Update and SSL Decryption

Re: Error in parsing xml response

Locked user list

Problem with AD authentication - username change

Couple of questions about GlobalProtect client and AppStore through PA500

Problem with Authentication Profile

Appstore and itunes on iOS

Re: management-console not available via https after upgrade from 3.1.7 to 4.0.1

Re: Memory error on PA-500

Memory error on PA-500

Re: File blocking not working with Hotmail

File blocking not working with Hotmail

Network Security

Cloud Security

Security Operations