Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About Radmin_85
About Radmin_85
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
02-22-2019
142Posts
7Likes
0Solutions
Feb 22, 2019Last Visited
User
Activity
User
Profile
Latest posts by Radmin_85
| Subject | Views | Posted |
|---|---|---|
| 1483 | 01-31-2019 03:00 AM | |
| 696 | 01-14-2019 03:18 AM | |
| 557 | 11-16-2018 12:54 AM | |
| 405 | 11-15-2018 11:15 PM | |
| 570 | 11-15-2018 11:42 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 09-26-2018 04:38 AM | |
| 1 | 02-20-2018 02:20 AM | |
| 1 | 08-02-2017 02:48 AM | |
| 1 | 07-07-2018 02:27 AM | |
| 1 | 02-01-2018 11:42 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 | |||
| 2 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 08-01-2017 02:05 AM |
| Date Last Visited | 02-22-2019 07:02 AM |
| Total Messages Posted | 146 |
| Total Likes Received | 7 |
01-31-2019
03:00 AM
hello all after upgrade to new GP 4.1.8 there is some kind of problem The phones try to connect to portal and gateway and after it we get security warning but we continue and get connected But then when we try to connect ones more the GP says it is failed. We must re-enter the login and password again Is it some way to stay connected on GP even if you close the GP application on phone? And how i can install the exported self-signed certificate from PA to android phones?
... View more
01-14-2019
03:18 AM
Hello we have PA 220 model and when we implement SSL decryption we can observe the ping delay in our trust interface.THE cpu load is 50 % when we turn off the SSL decryption everything is normal
... View more
11-15-2018
11:15 PM
@MickBall I have only one public ip with NAT.And i can not ping this public IP from internal side.I need to go out and then come back again somehow to ping my external Ip
... View more
11-15-2018
11:42 AM
Hello all We have configured GP REMOTE ACCESS VPN with OTP authentication. Ones we try to connect to Portal it failed to pass at the first time only second time.In Radius server we see that it tries to authenticate first the Ldap account then VPN account we configured the followings and it is ok.And i would like to know is it best practice from security point of view
... View more
11-15-2018
11:37 AM
@MickBall Mike i guess we must configure split DNS in order to connect to the same FQDN whether we are inside the LAN or outside It is not best practice to connect to your outside ip through your gateway device. In GP there is internal Gateway.I guess the internal gateway is the method by which you can connect to portal through your internal gateway
... View more
11-14-2018
10:34 PM
@Rajesh12 @MickBall So in order to connect to outside IP i have to configure it as gateway under internal host detection ?
... View more
11-14-2018
11:08 AM
@MickBall The problem is that In GP application there is an option which says that when the user takes the corporate notebook and go home to connect to home Wi fi and to work he must connect the to GP portal first otherwise you can not get access to anything even Internet from home When that user comes back to office and connect his Notebook to corporate LAN he get the local network ip address but at the same time tries to connect to GP portal (because of user logon).So it can not connect to outside IP and that is why the user can not get access to anywhere even though it got the local ip address from DHCP So there must be some mechanism when user connect his laptop to internal lan in the office it must recognize the local network and must connect to other gateway.i guess that must be internal gateway
... View more
11-14-2018
05:55 AM
@MickBall just added it for internal host detection
... View more
11-14-2018
04:31 AM
@MickBall I created an extra internal gateway without tunnel mode.That is what i mean
... View more
11-14-2018
04:17 AM
@MickBall you have not give the address pool?
... View more
11-14-2018
04:02 AM
@MickBall i guess i even can not connect to Portal too Because normally when i type in browser the internal gateway i must get into the page where i usually download the GP agent app.But i even can not do it.It ask for certificate and then when i use certificate it says bad request IT is everything ok when i do it outside the network,But the problem is when i try to connect inside the corporate network
... View more
11-14-2018
02:50 AM
hello @Rajesh12 Yes we did it but the problem is when PA try to connect to that gateway (without tunnel mode) it asks for certificate and we use the same certificate (company certificate) which we use to connect to PA outside network (which is ok) it says Bad request So as i understand the host could not reach to portal even to see the internal host identification and that is why can not recognize internal network
... View more
11-14-2018
12:31 AM
Hello all we have mobile clients with GP which use corporate notebooks at home .It was configured user logon option to force the notebook to connect through GP when it connects to home WI-FI When the same worker comes back to workplace and plugged in the ethernet cable they still use the same GP network Is there any way to force the client notebook to recognize the internal network and dont use GP with user logon option in place?
... View more
11-14-2018
12:19 AM
Ok we could resolve this solution But one more point When the worker connect to corporate network through GP at home with user-logon option it is ok But when that worker returns to workplace with the same corporate notebook it still remains in GP network Is it possible to force the PA or GP agent to recognize the internal network when one plugged in the ethernet cable in workplace and dont connect through GP agen with user-logon option?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-22-2019
07:02 AM
|
Likes From
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
