Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- ›
- About Alex_Samad
About Alex_Samad
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
a week ago
315Posts
24Likes
6Solutions
Jan 16, 2021Last Visited
User
Activity
User
Profile
Latest posts by Alex_Samad
| Subject | Views | Posted |
|---|---|---|
| 190 | 10-18-2020 12:26 AM | |
| 239 | 10-17-2020 12:09 AM | |
| 369 | 09-21-2020 03:59 PM | |
| 402 | 09-21-2020 02:07 PM | |
| 482 | 09-18-2020 05:04 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 08-02-2018 08:09 PM | |
| 1 | 11-14-2019 12:26 PM | |
| 1 | 09-09-2020 02:33 PM | |
| 2 | 03-20-2020 04:13 AM | |
| 3 | 02-13-2020 11:11 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 | |||
| 3 | |||
| 5 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 05-08-2017 10:08 PM |
| Date Last Visited | a week ago |
| Total Messages Posted | 322 |
| Total Likes Received | 24 |
10-18-2020
12:26 AM
Hi Yes did some testing. so lets stay I have RootCA IntC1 IntC2 Server cert. RooCa signs intC1 which signs intC2 which signs Server Cert. If my cert profile only has intC2.. it fails to verify. I need RootCa + IntC1 + IntC2 for it to authenticate server Cert. which I think is actually more of a security flaw. if I present a leaf cert signed by intC1 it would work, but thats not my intention !
... View more
10-17-2020
12:09 AM
Hi I want to use/setup a certificate profile for use with an EDL. The site - internal running minemeld. has multiple int CA. So for the profile, do I add only the last int CA or all of them. How does certificate profile work will it say okay if any certificate signed by any of the ca's work ? how can i limit it to just the last intCA... do i do that by adding in only the last ca ?
... View more
09-21-2020
03:59 PM
Yes, i wasn't clear though. when i look at the runing stats for the vrtr and look at the route tab and look at routes - you can't see the admin dist there or the cli , when i did a show route with detail it should show that so I don't have to guess / remember. Thanks A
... View more
09-21-2020
02:07 PM
Thats it i new i had forgotten something ! Where can i see admin dist - can't see it in the gui. I can see it where I set static
... View more
- Tags:
- s it
09-18-2020
05:04 PM
Hi Got BGP providing DGW and I have a static 0.0.0.0/0 with metric 240 so its last resort route but VIRTUAL ROUTER: vr_default (id 2) ========== destination nexthop metric flags age interface next-AS 0.0.0.0/0 0.0.0.0 19 ~ 0.0.0.0/0 202.74.32.69 ?B 612028 ASXXXX 0.0.0.0/0 202.74.32.71 240 A S ae3.10 for some reason the static is active over the BGP route ? can't find a KB on how routing decides ! Support - well nearly 2 weeks in and the person doesn't understand ..
... View more
09-14-2020
02:37 PM
Hi had an indirect chat with PA engineer. Seems like the linkage between VR is not that good. Best to just keep it all in 1 VR. The doco is not very clear on this.
... View more
09-12-2020
08:03 PM
So get the complexity bit Doesn't really explain how inter router comes happens. Can I connect them to do OSPF or BGP Do they have to share a phy interface or ?
... View more
09-11-2020
10:23 PM
Hi So I am doing some network segregation. I have vr with say 40 interfaces on it. I want to add 3 more. can i create a new vr (vr_b) place the 3 interface on the new vr (vr_b) and then create a vlan to connect vr original (vr_a) to new vr (vr_b) When do you create a new vr ? And what is the down side.
... View more
09-11-2020
04:09 PM
Gave it a try seems to work !
... View more
09-11-2020
04:02 PM
Been looking and googling and can't find it . so I have created a BGP import filter. attached to router group. But the match ... " AS Path Regular Expression" what do i put in there to limit it to 1 AS Find it hard to believe somebody hasn't done this. Also the doco ... sigh I'm thinking something like ^[^_]*$ might work . not even sure is pa regex is standards compliant
... View more
09-09-2020
02:33 PM
1 Kudo
Definitely seems like they have done a whole lot of ssl decrypt work in 10.x. Pity they will not be back porting into 9.0. Just have to wait till TAC recommends 10
... View more
- Tags:
- see
07-17-2020
09:36 PM
Can't seem to edit What I would like to really do is say if the source address is this (the SNAT address) then use this as the next hop ..
... View more
07-17-2020
08:57 PM
Hi So I have 1 internal address that when it goes out via the PA to the internet (SNAT) i want it us a specific route - net hop. So it looks like I can't set pBF on source address (SNAT). has to be on the original address. and I can't specify outbound internet
... View more
07-16-2020
02:07 PM
well this is on a ssl hand shake the initial setup. I go openssl s_client connect <ip>:443 that fails. I have been working with support for a while now. and they are saying cause their might be some segmenation happening that could affect the firewall interpreting the ssl handshake as some of the packets are not being processed ! I was rather suprised.
... View more
07-15-2020
06:54 PM
Hi So I am working through a ssl decrypt issue with PA support. I am being told that because the stream is being segmented - so not coming as 1500mtu packets. the PA can't work out what the stream is. The implication is that app-id doesn't work properly unless you have full 1500mtu packets. I thnk my SE is agreeing - not 100% sure. I am a bit lost on this, cause I wouldn't have though segmentaiton would cause a problem expect for if there was a timeout
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
a week ago
|
Likes Given To
Likes From
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
