Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About mmcastr
About mmcastr
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
a week ago
11Posts
0Likes
0Solutions
Apr 09, 2021Last Visited
User
Activity
User
Profile
Latest posts by mmcastr
| Subject | Views | Posted |
|---|---|---|
| 514 | 01-16-2019 04:05 AM | |
| 1064 | 11-27-2018 03:19 AM | |
| 1093 | 11-22-2018 09:57 AM | |
| 919 | 03-09-2018 05:27 AM | |
| 933 | 03-07-2018 11:33 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 | |||
| 7 | |||
| 10 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 06-05-2017 08:54 AM |
| Date Last Visited | a week ago |
| Total Messages Posted | 11 |
01-16-2019
04:05 AM
We updated the 2 pair of Firewalls on last sunday to 8.0.15 and after that our CACTI stop to show the interfaces statistics from PA-5020. Cacti is monitoring the updated PA-3020 correctly. The issue only happen with PA-5020. Did anyone experience something related ? Regards, Marcelo Castro
... View more
11-27-2018
03:19 AM
I did something like you suggested to get the data from logs. Thanks for the tip.
... View more
11-22-2018
09:57 AM
We have a cenario where the Firewall control the Internet access from users in the local network and we control these access with URL profiles and security policies. We identify the user session with USER-ID Agent installed on Windows AD Servers. I'd like to count how many users the Firewall identify per day in the Internet Access. How can I get these kind of statistic? Is there a way to extract this data from the PA? Regards, Marcelo Castro
... View more
03-09-2018
05:27 AM
Hi @BPry We have a scenario where Internet access is blocked by default for most of users and the access is allowed by a custom URL object that have a list of URL or FQDN. I found a traffic related to one of the allowed FQDN that uses http referrer but is denied because the FQDN inside the URI is not inside the white list but it has into the http referrer the allowed FQDN. Based on it I'm trying to allow this traffic based in this http field. I didn't find the http referrer attribute inside the available options to http protocol when I was building the custom app. As we don't have a testing environment to homologate this custom app I'd like to ask you if I'm in the right way to match this kind of traffic and allowed. Below I put the options I worked to build the custom app. Application / Signatures Signatures Name: http-scup Scope: Transaction Operator: Pattern Match Context: http-req-params Pattern: www.domain.com Qualifier: http-method GET Thanks for your time.
... View more
03-07-2018
11:33 AM
Hi, is it possible to build a security access rule based on http-header referrer field? Someone have do it? Regards
... View more
02-01-2018
08:10 AM
I'm not comfortable with XML config yet but I'll study your suggestion. Thanks for this smart tip @BPry
... View more
02-01-2018
03:51 AM
@jvalentine There is no budget to follow suggestion #1. As I was reading about it we have a lot of work to do. We have so many pre rules to migrate to post rules. Thanks for this tip.
... View more
01-24-2018
07:54 AM
In a scenario with many groups of firewall's centrally managed by Panorama. The Panorama is running in a appliance without HA. What we should do when Panorama is outage by a problem and we have to do any change in the Firewall Policies? Best Regards, Marcelo Castro
... View more
12-14-2017
09:08 AM
I opened a case on Palo Alto and the System Engineer discovered that it is a problem started on release 7.1.11 and will be fixed on release 7.1.15. The workaround for it by now is the command below that it must be applied on every restart because it does not be salve on settings. >debug user-id query-unknown-ip yes
... View more
12-14-2017
05:08 AM
We've just talked about your suggestion here. We are trying this change on settings as a workaround for now. Thanks
... View more
12-14-2017
04:41 AM
After update PAN OS to release 7.1.14 we are having problems with user identification. The user credentials are lost in PA and some access are denied because PA can not identify the user. Have anyone experiencing something like that on 7.1.14?
... View more
- Tags:
- AD Issues
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
