About James_Costello

Is the domain included in the authentication profile for the Captive Portal? ... View more

Good to hear you found the answer. Have a good day ... View more

I searched for a feature request regarding PPPoA and did not find one. I would recommend speaking with the local Palo Alto Networks Sales Engineer to generate a feature request if this will be something that needed at additional sites. In the interim - this Discussion - PPPoA - describes a work around to convert the traffic so that PA-200 can authenticate. ... View more

Does this occur with different browsers or just one in particular? When you login are there multiple logins showing in the Logged in Admins widget on the Dashboard of the firewall? The output above indicates that authentication was successful. What is the output from the authd.log when the two logins occur from the CLI - tail lines 100 mp-log authd.log ... View more

Two options 1. Configure the security profiles for the server's security policy to be alert only on all levels (useful for comparison purposes between the Palo Alto Networks firewall and the server outputs) 2. Configure no security profiles for the server's security policy. Configuring exceptions for all current signatures would require updating each time that new signatures are released. This is double edged in that it would be more work to keep up to date, but would also create greater familiarity with the current list of signatures on the firewall ... View more

Is the administrator account utilizing local authentication or an external source (LDAP, RADIUS, Kerberos)? Do you experience the same issue when connecting via SSH or just the WEBUI? ... View more

Just to verify The traffic is going from one zone to another or alternatively between two different interfaces of the same zone on the firewall There is a security policy in place to allow the traffic to flow The certificate and private key for the nginx set have been installed on the PA There is a decryption policy set for SSL Inbound Inspection Is the client connecting to the server IP or the NAT address for the server? If you could provide more detail about your configuration, that would help to troubleshoot ... View more