This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About ppk_vs
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About ppk_vs
09-22-2023
9Posts
1Like
0Solutions
Sep 22, 2023Last Visited
User
Activity
User
Profile
Latest posts by ppk_vs
| Subject | Views | Posted |
|---|---|---|
| 1388 | 02-04-2022 12:26 PM | |
| 1506 | 01-21-2022 05:00 AM | |
| 2956 | 01-21-2022 04:46 AM | |
| 2143 | 01-18-2022 04:19 AM | |
| 1294 | 01-04-2022 03:49 AM | |
| 9006 | 07-22-2020 03:40 AM | |
| 4694 | 07-22-2020 03:04 AM | |
| 3644 | 08-10-2017 07:52 AM | |
| 3668 | 08-10-2017 03:39 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 07-22-2020 03:04 AM |
User Badges
Community Statistics
| Member Since | 07-14-2017 05:38 AM |
| Date Last Visited | 09-22-2023 10:32 AM |
| Posts | 9 |
| Total Likes Received | 1 |
02-04-2022
12:26 PM
Hello Steve, yes, correct, there is a built-in action, and in this built-in action we have a mandatory field - registration, we we can choose from three options: Local User-ID, Panorama User-ID, Remote User-ID. We don't have panorama, and we don't have local user-id on the firewall, so, I guess, the only option is to use remote User-ID?
... View more
01-21-2022
05:00 AM
Hello colleagues, did someone manage to use dynamic tag registration on the remote user-id agent? I cannot find any explanation in documentation or community discussions. It is written in the manual that need to create a http profile https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/forward-logs-to-an-https-destination.html So, first of all, there should be some login/password - what is this login, where is it configured on the user-id agent? The port in the example is 443. But we don't have any service running on the 443 on the servers with user-id agent. Should it be the same port on which the paloalto firewall connects, 5007? What should be done with a certificate on the user-id agent, do I need to generate some? Thanks in advance for any working example.
... View more
01-21-2022
04:46 AM
Hello Kiwi, does this feature requires some additional user-id agent configuration?
... View more
01-18-2022
04:19 AM
Sorry, I have just seen the answer. So, I normally just use user-id exclusion lists for such server for which I don't want to use a user-id from the one side and where can some authentication event happen.
... View more
01-04-2022
03:49 AM
Hi everyone,
I am reading a study guide for PCNSA now, and cannot understand this statement about security zones, p 67, 2.6:
"Security zones are divided into two broad categories: Intrazone and Interzone." That sounds really strange, how can be some zone related to intrazone or interzone? That is about the traffic flow, so shows between which zone traffic goes, so it can be used as a security policy characteristic, but not for a single zone.
But after there is a question which is even more strange:
Q1. Which two default zones are included with the PAN-OS software? (Choosetwo.) a) Interzone b) Extrazone c) Intrazone d) Extranet
With a correct answer A,C. So, suddenly study guide's author change his opinion about "Interzone" and "Intrazone" that they are not zone categories, but some default zone names. But this is also for me sounds really strange, I have never seen such default zones and cannot find it in documentation.
... View more
- Tags:
- PCNSA
- study guide
07-22-2020
03:40 AM
Hi, there is a feedback from paloalto users that after the upgrade to 9.1 it is not more possible to commit configuration changes if there are more than one IKE profile used on the same interface. But I cannot find it in the release notes.
... View more
07-22-2020
03:04 AM
1 Kudo
Is it mentioned somewhere in the release notes? I didn't found it, so I am afraid that they just broken it occasionally. It is sad, the paloalto is becoming a really **bleep** product. The support is awful, it needs to explain to support engineers how things should work. During one of my last discussions, I have spent four hours proving with references to the documentation and with tests in the lab I created especially for this. And this ticket is still on the engineering side for 8 months without any estimate. Another problem unresolved for more than three months and the only feedback is that they may be fix it in 9.0.11, but for now there is even no estimation date for 9.0.10. GeoIP is not reliable and there is no easy procedure on how to fix errors there, the support proposes to rollback the content database to the old that was a week ago, or just wait, "maybe it will be fixed in some future update". External dynamic lists from the PaloAlto are abandoned before there were thousands of malicious IPs, not just hundreds.
... View more
08-10-2017
07:52 AM
Hi, may be I didn't explain the problem clear. So, for example, the user logged in to the PC - after that paloalto had the correct IP address. After that user opened any site in web browser, that used LDAP authentication. Then paloalto has IP address of the server, where that site was hosted, as an IP address mapped to the user. So if security rule allows access by user-id, it will not match IP address of the user's PC.
... View more
08-10-2017
03:39 AM
Hello everybody, We have a problem with a user to IP mapping. Doesn't matter which version of PanOS - 7 or 8, doesn't matter if it's using windows agent or direct access from paloalto to LDAP servers. Let's say a user is going to some server, windows exchange for example, and this server authenticates the user by LDAP. Then windows agent will have exchange's IP address mapped to the user name. For now, I have resolved this problem by excluding servers subnets in windows agent configuration. But not sure, may be there is a better way. Regards, Vladimir.
... View more
- Tags:
- user-id
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-22-2023
10:32 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks