This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Brett_Hobbs
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Brett_Hobbs
02-10-2021
6Posts
11Likes
0Solutions
Feb 10, 2021Last Visited
User
Activity
User
Profile
Latest posts by Brett_Hobbs
| Subject | Views | Posted |
|---|---|---|
| 1776 | 03-11-2021 02:10 PM | |
| 1918 | 02-10-2021 03:38 PM | |
| 3986 | 02-10-2021 03:30 PM | |
| 6157 | 06-30-2020 02:51 PM | |
| 24597 | 10-07-2018 01:42 PM | |
| 42213 | 07-31-2018 11:43 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 11 Likes | 07-31-2018 11:43 PM |
User Badges
Community Statistics
| Member Since | 04-11-2017 08:44 PM |
| Date Last Visited | 02-10-2021 07:11 PM |
| Posts | 6 |
| Total Likes Received | 11 |
03-11-2021
02:10 PM
Hi, Yes that is an option however it is not as flexible as being able to add and remove tags. Also we already use the alias for another use. We are applying group membership based on alias and policy based on group/alias it would be helpful if we had tags to quickly apply a policy to a single endpoint should the need arrive if we have to override a setting for a specific use case where we don't want to apply it to the whole group or have to manually update a policy to apply to individual agents.
... View more
02-10-2021
03:38 PM
I have a few XDR deployments I manage and one this I miss is the ability to tag objects like I can on firewalls. This would be useful for a number of tasks from: - filtering views/dashboards/reports - adding agents to dynamic agent groups - assigning policies to agents Often hardware or OS level details are not variable enough to filter and having to manage static groups to handle things can get clunky where tags on an agent would allow the admin to move agents in and out of different policies/groups easily.
... View more
02-10-2021
03:30 PM
I get the point around certbot but PA could implement their own code that supports the ACME protocol for issuing certs. Digicert now supports this directly to their API and others are adding it, I don't see that requiring a off-box solution is really needed. While I can see that it works and is a solution having the product take care of it's own security would be helpful especially to smaller deployments.
... View more
06-30-2020
02:51 PM
Now that chrome and safari are moving to 1 year certs this is becoming a must have. I would suggest a slight change to the original idea I posted from LetsEncrypt integration to inclusion of the certbot agent. The reason is that many CA's are now supporting cert requests via Certbot so this would allow users to use either LetsEncrypt or their own preferred CA.
... View more
10-07-2018
01:42 PM
Hi, That particular process would not work for us today (possibly in the future). I was thinking that because GlobalProtect would have a DNS A record that having the certbot agent installed on the firewall we could support automatic verification and renewals. MGMT interface woud take some aditional thought to solve either via your below method or some external DNS requirements.
... View more
07-31-2018
11:43 PM
11 Kudos
Hi, While I know most would use an issued SSL certificate it would be great if PANOS supported LetsEncrypt for requesting SSL certificates for things like the management interface and GlobalProtect.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-10-2021
07:11 PM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks