Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About Hongson
About Hongson
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
08-21-2020
22Posts
0Likes
1Solution
Aug 21, 2020Last Visited
User
Activity
User
Profile
Latest posts by Hongson
| Subject | Views | Posted |
|---|---|---|
| 391 | 05-28-2018 06:53 PM | |
| 409 | 05-25-2018 05:16 AM | |
| 923 | 03-26-2018 10:39 PM | |
| 970 | 03-24-2018 06:46 PM | |
| 982 | 03-24-2018 01:25 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 | |||
| 3 | |||
| 1 | |||
| 2 |
User Badges
Public Statistics
| Date Registered | 05-15-2017 09:37 PM |
| Date Last Visited | 08-21-2020 01:37 AM |
| Total Messages Posted | 22 |
05-25-2018
05:16 AM
Dear all, I want to permit HRT members access a recruitment website called "https://www.vietnamworks.com". I create a security rule permit them to access a URL_category named "HRT_recruitment". In "HRT_recruitment" category I added "*.vietnamworks.*" and "vietnamworks.*" and even "www.vietnamworks.com" but It doesn't work. I checked traffic log, Traffic was not allowed by "HRT_recruiment" rule, traffic passed it and went to "All_deny" rule. So traffics were denied. Many other URLs have same issue. But this issue just happen sometime ago, It worked normally before. Maybe it started when the content version transitions from the 3-digit version numbering scheme to the new 4-digit version numbering scheme. My FW running 8.0.5 software version, Application version 8024-4749
... View more
03-26-2018
10:39 PM
Thank you all for your help, 'Cause the default route is connection to ISP-2 so I've to create a pbf rule redict it to ISP-1. And found out that my pbf rule configuration missed Next hop IP ( I thought that only Egress interface is enough). Problem has been solved now 🙂
... View more
03-24-2018
06:46 PM
Thank you Raido for your reply. I use pbf also, because by default traffics from my server go outside via ISP-2 so I created a pbf rule redirect traffic to ISP-1. I also add an IP in the new IP range to ISP-1 interface. I've no ploblem when NAT using the old IP range, but when using the new IP range, connection failed.
... View more
03-24-2018
01:25 AM
Dear all, I've 2 internet lines connected to 2 different ISP: ISP-1 and ISP-2. Default route to internet is the connection to ISP-2 I just bought 1 more public IP range from ISP-1 that belong to a different subnet with my current ISP-1 public IP range. Now I want to NAT my server using an IP in the new public IP range, but server cannot connect to internet. I've checked logs and see no problem (NAT is successfull, securitiy rules is allowed). I've no problem if I NAT using current old public IP range. So is there any configuration I have to do before using the new IP range for NAT?
... View more
01-29-2018
07:37 PM
Hi @BPry and hi all, I got 1 more question. If I remove and then re-add a same virtual disk by issue these command: request system disk remove "disk name" / request system disk add "disk name" Will my logs on that virtual disk still remain or it'll be formatted after I added it again?
... View more
01-18-2018
01:46 AM
Hi everyone, I'm using Panorama 8.0.5 in Legacy mode on ESXi 6.0, I've 2 virtual disks: virtual disk 1: 52GB for system virtual disk 2: 500GB for logging storage. Now, I want to expand the size of logging storage up to 2TB. So can I just changing the size of current disk 2 from 500GB to 2TB or I have to add another 2TB virtual disk 3 then delete the current 500GB virtual disk 2?? If I have to delete the current 500G virtual disk 2, is there any way to transfer logs on virtual disk 2 to the new 2TB virtual disk 3? Thank you!!!
... View more
10-27-2017
12:58 AM
@Roby_SreejithThank you, I already dit it, but it can only block down/up file form/to http site, can't work with https
... View more
10-27-2017
12:20 AM
Dear all, I want to limit the file size user can download/upload, for example prevent user from download/upload file larger than 100MB How can I do it? Thank in advance.
... View more
10-20-2017
01:35 AM
Yes, you're right, I got this problem once time before, when setup remote from the internet to DMZ, I also fixed it by changed the Dos protection action from deny to protect. But after along time, I completly forgot about Dos protection
... View more
10-20-2017
01:11 AM
Holy sh***!! Yes, you're right, I'm using Dos protection too and forgot about it :))
... View more
10-19-2017
06:44 PM
@BPryI got 1 year support contract Thank you guys, I've setup Globalprotect to establish VPN to my PC in workplace, it's pretty cool 🙂
... View more
10-17-2017
09:03 PM
Can you create a ticket support in customer support page? I tried but in step 3, there's no checkbox to select device
... View more
10-17-2017
08:08 PM
I'm using 6.1.16, I think it's not relate to PAN-OS version
... View more
10-17-2017
07:21 PM
Yes, I use a "Deny all" rule, I'm sure RDP service is correct with 3389 port 'cause I'm using it to remote to a server in DMZ zone. I create rule with permit access from my PC in internet to any zone and any address in internal network. But it's still not working and there's no any log except ping or telnet (but ping and telnet is not success and destination address is not NATed) It seems hard to connect directly from internet to L3_trurst zone, so I'll use Globalprotect to setup VPN client to site.
... View more
10-16-2017
02:24 AM
I think it must be 113.160.131.230 but anyway, I tried changing it to 10.126.123.132 or any, it's not working 😞
... View more
10-16-2017
02:06 AM
I've already choosen both Log at session start and end before 😞
... View more
10-16-2017
01:33 AM
Yes sir, Ping successful
... View more
10-16-2017
01:19 AM
I change the source translate to "translated address" but it still not working
... View more
10-16-2017
01:17 AM
Thank you Sir, this is the picture of recive.pcap and drop.pcap, there's nothing in transmit.pcap and firewall.pcap. I'm sorry, due to security reason, I'm not allowed to upload capture file here 27.67.9.246 is my public IP from internet zone I also run command show session all filter source<your_public_src_ip> destination 113.160.131.230 destination-port 3389 but there's no active session
... View more
10-15-2017
07:04 PM
Thank you all for your help, I added source translation to IP of L3_Trust interface (10.126.125.1) but still not success when Remote Desktop 😞
... View more
10-15-2017
07:08 AM
Hello all, I wanna Remote desktop from my PC in home to PC in my company but not success This is my connection diagram I wanna remote to PC 10.126.123.132 (belong to VLAN 123, I use several VLANs in Core switch) but not success, NAT seems not to work, there's no traffic logs This is my config.. Virtual router config. Security rules NAT rule I can remote from internet to a server in DMZ zone successfully but L3_Trust zone, so I think because of using VLAN in core switch, it requires some other config.. Please help me 🙂 P/S: The public IP in the pictures is just an example IP
... View more
Latest Blogs
Copyright 2007 - 2020 - Palo Alto Networks
