This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About sgoethals
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About sgoethals
07-23-2022
33Posts
1Like
3Solutions
Jul 23, 2022Last Visited
User
Activity
User
Profile
Latest posts by sgoethals
| Subject | Views | Posted |
|---|---|---|
| 4138 | 07-06-2022 05:10 AM | |
| 4212 | 07-05-2022 09:19 AM | |
| 1487 | 06-08-2021 01:54 PM | |
| 1534 | 06-08-2021 08:20 AM | |
| 1867 | 11-10-2019 06:32 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 10-20-2019 02:24 AM |
User Badges
Community Statistics
| Member Since | 06-13-2017 01:09 PM |
| Date Last Visited | 07-23-2022 10:00 AM |
| Posts | 33 |
| Total Likes Received | 1 |
07-06-2022
05:10 AM
After spending quite a bit of time on this, I determined a resolution to my issue. The newer encryption methods that use AES are supported in 2012R2. This is the OS, that I am using on the domain controllers (for just a little longer), however, the functional level of the domain was set to 2008. Once I updated the functional level, the Kerberos error went away and an "access denied" error showed up. The is happened because I had not made the service account a member of the Windows Group Remote Management. Once I made the service account a member of this group the error went away, and I was able to connect via WinRM-HTTP. Good luck on your resolution.
... View more
07-05-2022
09:19 AM
I recently changed to WinRM-HTTP and I am seeing the same thing. From the cli if I look at the log, I can see that I have an error "KDC has no support for encryption type. The error is at the end of the log when you use Shift-G after entering less mp-log useridd.log from the cli. I am not sure why I am getting this error, and trying to figure it out. For the service account I am using, I have turned on the option to use aes128-cts-hmac-sha1-96, but I am still getting the error. The DC is a Windows 2012R2 server.
... View more
06-08-2021
08:20 AM
Hi, I have an existing web application that I am contemplating moving to the cloud from on-prem. The app currently sits in a DMZ on a Palo 220. I am trying to determine the costs we would incur if we moved the app to the cloud. I need to get a good understanding of the bandwidth that comes into the app, and goes out. The traffic is based on http/https. Essentially a request comes into the application, it will make some queries to various resources on the Internet, and then take that data and pass it back to the requestor. Is there an easy way for me to get a report of the http/https traffic that is passed between the untrusted network and a DMZ zone to this application? Since I am sure the cloud service will want to charge for both incoming and outgoing traffic, I need to know what amount of traffic I currently have passing between these two zones. I know there are various reports available from the Palo, and I could use some suggestions on how to gather the data that I need. I appreciate any help that I receive. Thank you.
... View more
11-10-2019
06:32 AM
Hi All, I have an application override setup and it is working fine. The reason for the override is because we changed the port number of the application to something other than the default. The way I have this setup is I created a customer application and then setup an application override policy. My question deals with the override policy. I have the policy currently pointing to the customer application I created. I understand that by doing this, threat protection is bypassed. Since there is a built-in application for what I want, should I be selecting that instead of the custom application that was created.? My gut says yes. My only hesitation is that the built-in app assumes the original port number and not the one that I need. Will using the build-in application in the policy still allow me to use the non-standard port and achieve threat protection? Thanks in advance...
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks