This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
About P.Braat
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About P.Braat
01-29-2020
8Posts
0Likes
0Solutions
Jan 29, 2020Last Visited
User
Activity
User
Profile
Latest posts by P.Braat
| Subject | Views | Posted |
|---|---|---|
| 2432 | 05-10-2017 08:09 AM | |
| 1400 | 05-10-2017 08:01 AM | |
| 1420 | 05-09-2017 08:02 AM | |
| 3797 | 05-04-2017 12:25 AM | |
| 2283 | 05-04-2017 12:18 AM |
User Badges
Community Statistics
| Member Since | 04-25-2017 04:34 AM |
| Date Last Visited | 01-29-2020 07:24 AM |
| Posts | 8 |
05-10-2017
08:09 AM
Ok, this is getting interesting, i have just deployed a fresh 8.0.0 firewall in azure and upgraded to 8.0.2, and as of yet ipv6 in both ssl and ipsec is working. I also did a wire capture there an it the anomaly of the ipv6 byteswap did not occur (off course, otherwise it would not work). So why is it happenning in my other setup. There is a possability that azure is different, and ther is also the posability that it's because of the upgrades of my original firewall. I did not get arround to upgrading my original firewall to 8.0.2, so that could also have an effect. If i ever figure out what this is i'll be sure to post it here. For now i'm just happy it's working.
... View more
05-10-2017
08:01 AM
No, we are running 8.0.1 at the moment
... View more
05-09-2017
08:02 AM
Hi, I just want to share a problem i have been troubleshooting. I have lots of vpn's terminating on our FW, haven't had real problems until i started to connect Azure VPN's. After a network hickup they usually did not come up again. I had the hardest time in finding out why. It seems that Azure sends so many IKE initiation packets that if for some reason (network hickup) we get a discard session in the session table it will allmost never get rid of this session by itself (i guess because the default session timout for udp discarding is 60 seconds and Azure sends an init at least 1 every 15 seconds.) So to get your vpn up and running again, go to sessions on the monitor pane, filter 'state eq discard', clear the session from your peer (should be port udp 500, and in my case the app was unknown-udp, that was the reason it started to discard in the first place). I am testing with a udp discard timout of 10 seconds now. Hope this helps some of you!
... View more
05-04-2017
12:25 AM
hi, The problem you are having is based on the fact that the only FW can in normal cercomstances can not highjack the ssl session because it does not have the root cert of the destination. therefore it can only work if you do a man in the middle (or ssl inspection as it is called in the firewall). this will terminate the session of the client on the firewall witch in turn wil present it's own cert, this cert wil be signed by the firewall itself unless you have taken precautions and installed a trusted public ca. In this case it presents it's a cert signed by itself, which is not trusted by the client, thats why you're getting a site not trusted. Hope this kind of explains the problem.
... View more
05-04-2017
12:18 AM
Hi As far as i know all HA links are expected to be in a sepperate ethernet segment. You can do this bij sepperate cables or bij seperate vlans for each ha type traffic. If you are stretching accros a data center, maybe it is wise to consider building the HA on L3 : L3 HA hope this helps
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
01-29-2020
07:24 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks