This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About mmcastr
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About mmcastr
09-16-2021
11Posts
0Likes
0Solutions
Sep 16, 2021Last Visited
User
Activity
User
Profile
Latest posts by mmcastr
| Subject | Views | Posted |
|---|---|---|
| 1434 | 01-16-2019 04:05 AM | |
| 2279 | 11-27-2018 03:19 AM | |
| 2308 | 11-22-2018 09:57 AM | |
| 2394 | 03-09-2018 05:27 AM | |
| 2408 | 03-07-2018 11:33 AM | |
| 3286 | 02-01-2018 08:10 AM | |
| 3575 | 02-01-2018 03:51 AM | |
| 3654 | 01-24-2018 07:54 AM | |
| 2426 | 12-14-2017 09:08 AM | |
| 2437 | 12-14-2017 05:08 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 13 Likes | |||
| 1 Like | |||
| 2 Likes |
User Badges
Community Statistics
| Member Since | 06-05-2017 08:54 AM |
| Date Last Visited | 09-16-2021 04:51 PM |
| Posts | 11 |
01-16-2019
04:05 AM
We updated the 2 pair of Firewalls on last sunday to 8.0.15 and after that our CACTI stop to show the interfaces statistics from PA-5020. Cacti is monitoring the updated PA-3020 correctly. The issue only happen with PA-5020. Did anyone experience something related ? Regards, Marcelo Castro
... View more
11-27-2018
03:19 AM
I did something like you suggested to get the data from logs. Thanks for the tip.
... View more
11-22-2018
09:57 AM
We have a cenario where the Firewall control the Internet access from users in the local network and we control these access with URL profiles and security policies. We identify the user session with USER-ID Agent installed on Windows AD Servers. I'd like to count how many users the Firewall identify per day in the Internet Access. How can I get these kind of statistic? Is there a way to extract this data from the PA? Regards, Marcelo Castro
... View more
03-09-2018
05:27 AM
Hi @BPry We have a scenario where Internet access is blocked by default for most of users and the access is allowed by a custom URL object that have a list of URL or FQDN. I found a traffic related to one of the allowed FQDN that uses http referrer but is denied because the FQDN inside the URI is not inside the white list but it has into the http referrer the allowed FQDN. Based on it I'm trying to allow this traffic based in this http field. I didn't find the http referrer attribute inside the available options to http protocol when I was building the custom app. As we don't have a testing environment to homologate this custom app I'd like to ask you if I'm in the right way to match this kind of traffic and allowed. Below I put the options I worked to build the custom app. Application / Signatures Signatures Name: http-scup Scope: Transaction Operator: Pattern Match Context: http-req-params Pattern: www.domain.com Qualifier: http-method GET Thanks for your time.
... View more
03-07-2018
11:33 AM
Hi, is it possible to build a security access rule based on http-header referrer field? Someone have do it? Regards
... View more
02-01-2018
08:10 AM
I'm not comfortable with XML config yet but I'll study your suggestion. Thanks for this smart tip @BPry
... View more
02-01-2018
03:51 AM
@jvalentine There is no budget to follow suggestion #1. As I was reading about it we have a lot of work to do. We have so many pre rules to migrate to post rules. Thanks for this tip.
... View more
01-24-2018
07:54 AM
In a scenario with many groups of firewall's centrally managed by Panorama. The Panorama is running in a appliance without HA. What we should do when Panorama is outage by a problem and we have to do any change in the Firewall Policies? Best Regards, Marcelo Castro
... View more
12-14-2017
09:08 AM
I opened a case on Palo Alto and the System Engineer discovered that it is a problem started on release 7.1.11 and will be fixed on release 7.1.15. The workaround for it by now is the command below that it must be applied on every restart because it does not be salve on settings. >debug user-id query-unknown-ip yes
... View more
12-14-2017
05:08 AM
We've just talked about your suggestion here. We are trying this change on settings as a workaround for now. Thanks
... View more
12-14-2017
04:41 AM
After update PAN OS to release 7.1.14 we are having problems with user identification. The user credentials are lost in PA and some access are denied because PA can not identify the user. Have anyone experiencing something like that on 7.1.14?
... View more
- Tags:
- AD Issues
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks