This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About markuskohlmeier
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About markuskohlmeier
08-21-2020
26Posts
1Like
1Solution
Aug 21, 2020Last Visited
User
Activity
User
Profile
Latest posts by markuskohlmeier
| Subject | Views | Posted |
|---|---|---|
| 4544 | 02-15-2018 07:23 AM | |
| 4595 | 02-15-2018 06:39 AM | |
| 4387 | 06-15-2017 11:17 AM | |
| 2004 | 06-14-2017 08:27 AM | |
| 3306 | 12-08-2015 01:33 PM | |
| 3312 | 12-08-2015 01:29 PM | |
| 3465 | 12-08-2015 01:23 PM | |
| 3472 | 12-08-2015 01:04 PM | |
| 3680 | 12-08-2015 12:39 PM | |
| 1451 | 06-13-2014 07:46 AM |
User Badges
Community Statistics
| Member Since | 09-27-2010 12:23 AM |
| Date Last Visited | 08-21-2020 10:00 AM |
| Posts | 26 |
03-20-2018
01:49 AM
I've also tried this and had the same result; Duo notification followed by GP invalid password message. From my discussions with Palo, it would seem that native Duo 2FA isn't supported yet for GP. You can work around it in a way though by utilising an external radius server to perform the 2FA part of the authentication, rather than the native method.
... View more
06-19-2017
10:03 AM
Hello Nick, I'm right there with you on that. However there are things you will not be able to decrypt due to many differnt issues. One good example of this is PAN updates, they cannot be decrypted. What we did is exclude that particular URL/IP address range and made the rule as specific as possible., i.e. source destination, applicayion, port, etc. We just created exclusions and called them 'trusted' end points off network. I hope that makes sense. Cheers!
... View more
06-14-2017
11:40 AM
Did you, in addition to committong the configuration to panorama, also push the configuration to the local log collector?
... View more
12-08-2015
06:51 PM
Hi Markus,
Can you try this:
1. Modify the LDAP server profile to use port 636 for the connection to the GC.
2. Create a new group mapping using this LDAP profile.
3. Use one group from the group list pulled from the server and put it in include list and commit the changes.
See if it helps. Else I would suggest to contact support.
Regards,
Abhishek
... View more
06-22-2014
06:44 AM
Here is the documentation to create a custom app-id for your situation. Creating Custom Application Signatures You may also want to submit your application to PA to request an official app-id be added to the system. This is not a guarantee but would at least put you on the list of open requests. How to Request a new App-ID
... View more
05-27-2013
08:23 AM
Hi community. Does anyone know if it is possible to overwrite the ip-user-mapping collected by the user agent via the xml-api? It looks like that it is not possible to logout the user via the xml-api when the information is collected by the user agent. When I send a login via the xml-api before the logout it seem to be ok. Regards, Markus
... View more
04-08-2011
12:01 PM
Marcus, This is not correct behavior. You should contact support immediately and open a case to troubleshoot this problem. ~Phil
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-21-2020
10:00 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks