Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About husetech
About husetech
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
10-04-2019
27Posts
1Like
3Solutions
Oct 04, 2019Last Visited
User
Activity
User
Profile
Latest posts by husetech
| Subject | Views | Posted |
|---|---|---|
| 1786 | 09-30-2019 12:02 AM | |
| 1854 | 09-27-2019 05:34 AM | |
| 1891 | 09-26-2019 11:25 PM | |
| 946 | 09-19-2019 03:04 AM | |
| 1018 | 09-18-2019 04:00 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 02-28-2019 12:26 AM |
Posts I Liked
User Badges
Public Statistics
| Date Registered | 08-09-2017 01:30 AM |
| Date Last Visited | 10-04-2019 03:25 AM |
| Total Messages Posted | 27 |
| Total Likes Received | 1 |
09-30-2019
12:02 AM
Worked perfectly, thank you! So I guess it's not a bug after all but intendet to work like this.. Appriciate the help. Best regards husetech
... View more
09-27-2019
05:34 AM
Hi @kiwi,, no TAC has not approved this issue as BUG. I have not yet contacted TAC, What is TAC? And I am very sorry to not have mentioned the version we are using. We are using the latest PAN OS build 9.0.3-h3.
... View more
09-26-2019
11:25 PM
Hello everybody! PAN OS build 9.0.3-h3. According to the PAN documentation the "External Dynamic Lists" (Object-> External Dynamic Lists) )are supposed to use "External Dynamic Lists Service Route" (Device-> Setup -> Services -> 'Service Route Configuration'). This doen't seem to be the case since any changes in that area have no effect for EDL. It seems that 'URLS Updates' Service Route is responsible for any entry withing an EDL. Changing that specific Route does fix our problem but breaks the native PAN melicoious/high risk/ bulletproof IP fetching system. Which is not the way to go. Our EDL needs to access an internal only host. Keeping the default settings, it tries to use an external route to access the specific host. We need to change the Route to use the internal interface but without breaking the native PAN Dynamic IP Lists.
... View more
09-18-2019
04:00 AM
Hey, I just installed Ubuntu 16.04 to set up MineMeld according to these instructions: https://live.paloaltonetworks.com/t5/MineMeld-Articles/Manually-Install-MineMeld-on-Ubuntu-Server-16-04/ta-p/253336 Once running sudo apt install -o Dpkg::Options::="--force-overwrite" -y minemeld I get the following Error: E: Unable to locate package minemeld When running uname -a to check if I have the 64bit version installed I get: Linux MINEMELD 4.4.0-164-generic #192-Ubuntu SMP Fri Sep 13 12:02:50 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux I couldn't find any other thread going into this issue. The ubuntu .iso I downloaded was labeled "ubuntu-16.04.6-server-amd64" Best regards husetech
... View more
02-28-2019
12:26 AM
1 Kudo
Hey @reaper, -have you tried scp? First thing I did after you wrote this was to try the export via scp. After some trouble regarding the syntax I finally was able to pull the logs with this command: scp export stats-dump start-time equal 2018/12/01@10:00:00 end-time equal 2018/12/31@10:00:00 to username_on_remote_System@10.164.15.27:/log_dez !hint: after export, I had to extract the file twice to get the wanted folders + files I also gave write access to everybody on the SCP destination folder Thank you very much!
... View more
02-26-2019
11:05 PM
Hello @all, I would like to get a stats-dumb file which will be later used to generate an SLR report. Since the timeframe (1 Week) via the PA GUI is not long enough for us, I use CLI with the following command to generate the file: tftp export stats-dump start-time equal 2018/12/01@10:00:00 end-time equal 2018/12/31@10:00:00 to 10.164.15.27 !info: 10.164.15.27 is one of the AD and seemes to have a working connection to the PA, that's why I am using this server When firing off this command it first seems to work but the generated file remains zeroed out: After waiting for the timeout the final Log of PumpKIN looks like this: What did I try to solve this issue? 1. Used several TFTP software, always getting the same result. 2. deactivated the AV + FW on the windows server 3. edited the security settings on the TFTP folder to allow everybody every access Help is very much appriciated.
... View more
- Tags:
- reports
- SLR report
11-29-2018
07:23 AM
I had setup the same IP on the PaloAlto as on the Telekom Router. Once the cable was plugged in there were and IP Adress conflict. I changed the Netmask of the Router inside the PaloAlto to x.x.x.2 instead of x.x.x.1 (Router IP).
... View more
11-22-2018
05:43 AM
I assume that the PaloAlto somehow presents itself as 192.168.5.1 (IP of telekom router) on that specific Interface. Meaning that if I try to access the router within its network, I get redirected to the PaloAlto, thus not getting a Webinterface. Reebooting the Router when plugged into PlaoAlto did not help, first 2 minutes it looked good (Internet and Webinterface of telekom router was reachable), but then same behavior as described. Besides that we monitored the traffic between a VLAN and the telekom router. Clients in the VLAN are supposed to use the route through the telekom router to the WAN. But every test ends in "aged out". Could this indicate that the telekom router is not sending any packets back?
... View more
11-14-2018
05:54 AM
With (interface eq ethernet1/6) you can check the traffic flow for interface port 6 (Monitor->Traffic). So i figured that out, okay. But has anyone an idea why the Router is not reachable once the cable from Router is plugged into the PaloAlto?
... View more
11-14-2018
03:40 AM
I am having a weired issue with a PaloAlto and a Telekom Router. I configured a specific client address to always use a second Router (with internet connection) to communicate to the WAN. Everything on the PaloAlto looks good to me but when I plug-in the Telekom Router into the configured interface port of the Paloalto I cannot access the Routers webpanel nor do I get an internet connection. Once I unplug the Cable from the interface port I have internet and can access the routers webpanel again. The client i try to access the webpanel is directly connected to one of the routers ports. It's like there is too much traffic coming from the PaloAlto towards the router, which is according to the configuration not possible. Now I want to actually check if there is a lot going on on that interface and try to figure out why the webpanel is never reachable when plugged into the FW. Thanks in advance!
... View more
12-01-2017
02:11 AM
Just trying to bumb the Thread to see if anyone came accross the same problem.
... View more
11-16-2017
07:39 AM
Hey, it is just the GP Portal indeed. At the moment you try to access it, Internet Explorer gives you Windows-Security Message. In this message you have to confirm the Certificate (looks similar to the message you get when u connect vie GP with a working Profile). Once you press "OK", the message disappears followed by a "Can't reach Website" Window. Thanks for the support so far. If anyone else has come accross this issue and knows a solution feel free to let me know.
... View more
11-16-2017
05:45 AM
According to Wireshark: - Resolves the DNS Name of the GP Server correctly - Does the handshake successfully - Gets the Certificate from the GP Server But then it just stops... it was a total of 8-10 packets, so not much at all. I realized that with a working Profile I get a Certificate Warning (which I can confirm) that it wasn't signed by a public authority and may be not trustworthy. With the broken Profile I don't get such warning.
... View more
11-14-2017
12:47 AM
What do you mean by " cancel the proxy option" ? Our Proxy has an exception to let connections to our VPN through. Even if we remove the proxy it still won't connect. The weird thing is that if we setup a new User Profile (and delete the saved local Profile on that Notebook) it works. So I guess it must be the Profile. And no, I cannot access our HTTPS Website of GlobalProtect. When I try to access it I have to confirm our Certificate and after that I get: "This Website can't be displayed."
... View more
11-10-2017
12:12 AM
Hello everybody, we are facing a big problem regarding the GlobalProtect Client. Problem is that some Users can connect via GlobalProtect but some can not. Setting up a new User Profile fixes the Problem but that is not a solution. We are struggeling to find the cause inside the User Profiles which causes this behavior. If any of you have a suggestion on how to fix this we are thankfull to hear it. This is the GlobalProtect Log from one of the Users who cannot connect: ion event.
(T5180) 11/10/17 08:14:50:314 Debug( 538): WscCallback
(T5180) 11/10/17 08:14:50:314 Debug( 540): SetWscEvent
(T2232) 11/10/17 08:14:53:330 Debug( 416): before check wsc
(T2232) 11/10/17 08:14:53:330 Info (6779): Portal config does not exist
(T2232) 11/10/17 08:14:53:330 Debug(6786): Failed to get wsc-autodetect from config, try local
(T2232) 11/10/17 08:14:53:330 Debug( 370): wsc-autodetect is disabled
(T2232) 11/10/17 08:14:53:330 Debug( 405): before WaitForMultipleObjects
(T3892) 11/10/17 08:17:03:152 Info ( 431): msgtype = user_credential
(T3892) 11/10/17 08:17:03:152 Debug(2178): ServerThread: ProcessServerUserCredential. Redirect to processServerPortal.
(T3892) 11/10/17 08:17:03:152 Debug(1428): ServerThread: ProcessServerPortal
(T3892) 11/10/17 08:17:03:152 Debug(1430): Reset portal user auth cookie.
(T3892) 11/10/17 08:17:03:152 Debug(1437): user-profile-type tag exists with value 0
(T3892) 11/10/17 08:17:03:152 Debug(1493): checkupdate tag exists with value no
(T3892) 11/10/17 08:17:03:152 Debug(1497): bCheckUpdate is false.
)(T3892) 11/10/17 08:17:03:152 Debug(1508): portal-certificate-verification tag exists with value yes
(T3892) 11/10/17 08:17:03:152 Debug(1517): m_bVerifyPortalCertificate and m_bAdditionalCheck are true.
)(T3892) 11/10/17 08:17:03:152 Debug(1527): allow-cached-portal tag exists with value no
(T3892) 11/10/17 08:17:03:152 Debug(1531): bAllowCachedPortal is false.
)(T3892) 11/10/17 08:17:03:152 Debug(1537): Reset network discover ready event.
(T3892) 11/10/17 08:17:03:152 Debug(1557): This portal message is not from prelogon thread
(T3892) 11/10/17 08:17:03:152 Debug(1560): Clear lastErrStr
(T3892) 11/10/17 08:17:03:152 Debug(1562): m_szNewWinUser is ZZZ, m_szWinUser is
(T3892) 11/10/17 08:17:03:152 Debug(1563): m_bPreviousSwitchOffMsg is 0
(T3892) 11/10/17 08:17:03:152 Debug(4479): StartThreads():
(T3892) 11/10/17 08:17:03:152 Debug(8939): CPanMSServiceWin::UpdateDisableGPSetting() - bDisabled=0.
(T3892) 11/10/17 08:17:03:152 Debug(1618): No user home path in portal message.
(T3892) 11/10/17 08:17:03:152 Debug(1628): No domain in portal or user credential message.
(T3892) 11/10/17 08:17:03:152 Debug( 217): pid of PanGPA is 8184, m_dwPanGpAgentPid is 8184
(T3892) 11/10/17 08:17:03:152 Debug(1644): gets user name ZZZ.
(T3892) 11/10/17 08:17:03:152 Debug(1683): gets saved-user name .
(T3892) 11/10/17 08:17:03:152 Debug(7238): Saved password is empty.
(T3892) 11/10/17 08:17:03:152 Debug(1827): Pre-logon-then-on-demand value is no
(T3892) 11/10/17 08:17:03:152 Debug(1408): SSO starts.
(T3892) 11/10/17 08:17:03:152 Debug( 73): CTranslate: dwSidLen is 24
(T3892) 11/10/17 08:17:03:152 Debug(1429): (T3892) 11/10/17 08:17:03:152 Debug(1912): empty domain name.
(T3892) 11/10/17 08:17:03:152 Debug(1937): bCheckCachedPortalForPrelogon 0, m_nPrelogonTunnelRenameTimeout -1, GetPrelogonStatus() 2, m_userName ZZZ, m_preUsername pre-logon
(T3892) 11/10/17 08:17:03:152 Debug(1940): bPrelogonNeedTimeout is 0, m_nPrelogonTunnelRenameTimeout is -1, IsUserJustLoginInPrelogon() is 1, GetPrelogonStatus() is 2, m_userName is ZZZ, m_preUsername is pre-logon
(T3892) 11/10/17 08:17:03:152 Debug(4629): Set state to Retrieving configuration...
(T3892) 11/10/17 08:17:03:152 Debug(1549): unknown network type.
(T3892) 11/10/17 08:17:03:152 Debug(5033): ServerThread: ProcessServerPortal -- GetConfigFromPortal
(T3892) 11/10/17 08:17:03:152 Debug(3149): Machine's device id is 033c195e-4fb2-45cc-81e4-6de44eea985f
(T3892) 11/10/17 08:17:03:152 Debug(5495): entering.
(T3892) 11/10/17 08:17:03:152 Debug(9487): Portal's ipv4 address ZZZ.ZZZ.ZZZ.ZZZ
(T3892) 11/10/17 08:17:03:152 Debug(5534): SSO enable status is 0, user name is ZZZ, domain name is .
(T3892) 11/10/17 08:17:03:152 Debug(5537): reset user authentication status to true.
(T3892) 11/10/17 08:17:03:152 Debug(1990): open http session.
(T3892) 11/10/17 08:17:03:152 Debug( 372): set WINHTTP_OPTION_SECURE_PROTOCOLS
(T3892) 11/10/17 08:17:03:152 Debug(1470): Auto detect proxy for host vpn.ZZZ.de
(T3892) 11/10/17 08:17:03:152 Debug(1487): CPanMSServiceWin::SetProxyForHost: fAutoDetect: 0 url: proxy: bypass:
url:https://vpn.ZZZ.de/ returned proxystr:
(T3892) 11/10/17 08:17:03:152 Debug(1512): m_proxyInfo.dwAccessType is 0, m_proxyInfo.lpszProxy is (null)
(T3892) 11/10/17 08:17:03:152 Debug(8448): Scep clean
(T3892) 11/10/17 08:17:03:152 Debug(8450): Clean m_pScepCert
(T3892) 11/10/17 08:17:03:152 Debug(3392): Clean m_szScepCertPanName
(T3892) 11/10/17 08:17:03:152 Debug(3284): TriggerCaptivePortalDetection() end
(T5556) 11/10/17 08:17:03:152 Debug(3381): CaptivePortalDetectionThread: delay 2 seconds before captive portal detection. m_bIsDetectingCaptivePortal=1, m_bPreLoginIsDone = 0
(T5556) 11/10/17 08:17:03:152 Debug(3359): CaptivePortalDetectionThread: wait (2000 ms) for captive portal detection event.
(T3892) 11/10/17 08:17:03:152 Debug( 408): Found ipv4 default route
(T3892) 11/10/17 08:17:03:152 Debug(4689): Pre-login...,verifyportalcert=yes
(T3892) 11/10/17 08:17:03:152 Debug( 78): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer
(T3892) 11/10/17 08:17:03:168 Debug(1339): File C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer exists. File is tca.cer
(T3892) 11/10/17 08:17:03:168 Debug( 915): set trusted root ca file C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer
(T3892) 11/10/17 08:17:03:168 Debug( 408): Found ipv4 default route
(T3892) 11/10/17 08:17:03:168 Debug( 48): WSAGetLastError() returns 10035
(T3892) 11/10/17 08:17:03:230 Debug(1165): X509_verify_cert result is 1
(T3892) 11/10/17 08:17:03:230 Debug(7611): CheckServerCert(): Sever certificate has been verified with trusted root ca.
(T3892) 11/10/17 08:17:03:230 Debug( 731): StandardizeIpv6Format host=vpn.ZZZ.de
(T3892) 11/10/17 08:17:03:230 Debug( 793): standardized name is vpn.ZZZ.de
(T3892) 11/10/17 08:17:03:230 Debug( 731): StandardizeIpv6Format host=vpn.ZZZ.de
(T3892) 11/10/17 08:17:03:230 Debug( 821): standardized common name is vpn.ZZZ.de
(T3892) 11/10/17 08:17:03:230 Debug( 942): Check domain name vpn.ZZZ.de versus CN anme vpn.ZZZ.de
(T3892) 11/10/17 08:17:03:230 Debug( 905): Cert vpn.ZZZ.de name check succeeded
(T3892) 11/10/17 08:17:03:230 Debug(1197): SSL3 alert write:warning:close notify
(T3892) 11/10/17 08:17:03:230 Debug(7631): CheckServerCert() returns 4099
(T3892) 11/10/17 08:17:03:230 Debug(2512): portal proxyparam is empty
(T3892) 11/10/17 08:17:03:230 Debug(2534): OID, oid=
(T3892) 11/10/17 08:17:03:230 Debug(2578): IPADDR=vpn.ZZZ.de,PORT=443,URL=/global-protect/prelogin.esp,POST=1,PROXY_AUTO=0,PROXY_CFGURL=NULL,PROXY=NULL,PROXY_BYPASS=NULL,PROXY_USER=NULL,PROXY_PASS=****,VERIFY_CERT=0,ADDITIONAL_CHECK=1,SCEP_CERT=,oid=
(T3892) 11/10/17 08:17:03:230 Debug(1024): Send response to client for request https_request
(T3892) 11/10/17 08:17:03:230 Debug(2608): gpapintimeout not set, set it to 600 seconds
(T3892) 11/10/17 08:17:03:339 Debug(2678): receive pan_msg_ping, 3
(T3892) 11/10/17 08:17:03:441 Debug(2678): receive pan_msg_ping, 3
(T3892) 11/10/17 08:17:03:553 Debug(2857): HTTP_RPC, len=0, result is
(NULL)...
(T3892) 11/10/17 08:17:03:553 Debug(4776): prelogin to portal result is
(null)
(T3892) 11/10/17 08:17:03:553 Debug(4986): Failed to pre-login to the portal vpn.ZZZ.de. Error 0
(T3892) 11/10/17 08:17:03:553 Debug(2015): close WinHttp close handle.
(T3892) 11/10/17 08:17:03:553 Info (6732): Portal config does not exist, try registry/plist
(T3892) 11/10/17 08:17:03:553 Debug(6742): Failed to get version from config, try local
(T3892) 11/10/17 08:17:03:553 Info (5675): failed to retrieve value of the tag version.
(T3892) 11/10/17 08:17:03:553 Info (5689): Skip reading cached portal config.
(T3892) 11/10/17 08:17:03:553 Debug(8102): No scep profile
(T3892) 11/10/17 08:17:03:553 Debug(5702): portal status is Invalid portal.
(T3892) 11/10/17 08:17:03:553 Debug(5703): returns 0.
(T3892) 11/10/17 08:17:03:553 Info (5065): GetConfigFromPortal failed, restore previous prelogon username
(T3892) 11/10/17 08:17:03:553 Debug(4629): Set state to Disconnected
(T3892) 11/10/17 08:17:03:553 Debug(1549): unknown network type.
(T3892) 11/10/17 08:17:03:554 Debug(1024): Send response to client for request portal
(T3892) 11/10/17 08:17:03:554 Debug(7863): Set m_bPreviousSwitchOffMsg to 0
(T5556) 11/10/17 08:17:05:184 Debug( 408): Found ipv4 default route
(T5556) 11/10/17 08:17:05:184 Debug( 48): WSAGetLastError() returns 10035
(T5556) 11/10/17 08:17:05:233 Debug( 94): pan_http_captive_portal_detection: status is 204
(T5556) 11/10/17 08:17:05:233 Debug(3301): DetectCaptivePortal: captive portal is not detected for CP server index = 0. iStatus = 204
(T5556) 11/10/17 08:17:05:294 Debug( 408): Found ipv4 default route
(T5556) 11/10/17 08:17:05:295 Debug( 48): WSAGetLastError() returns 10035
(T5556) 11/10/17 08:17:05:345 Debug( 94): pan_http_captive_portal_detection: status is 200
(T5556) 11/10/17 08:17:05:345 Debug( 127): pan_http_captive_portal_detection(): head start=659, end=687.
(T5556) 11/10/17 08:17:05:345 Debug( 139): pan_http_captive_portal_detection() - captive portal isn't detected against server.
(T5556) 11/10/17 08:17:05:345 Debug(3301): DetectCaptivePortal: captive portal is not detected for CP server index = 1. iStatus = 200
(T5556) 11/10/17 08:17:05:345 Debug(3452): CaptivePortalDetectionThread: Didn't detect captive portal currently, and bCaptivePortalDetectedOnce=(0).
(T5556) 11/10/17 08:17:05:345 Debug(3359): CaptivePortalDetectionThread: wait (-1 ms) for captive portal detection event.
... View more
08-13-2017
11:57 PM
@vsys_remo Thank you for your reply! I used the WSUS Offline creation tool to get all the Updates for Windows 7 when I created my installation .iso. Somehow it seems it also downloaded Updates for other Systems, like Windows Server 2012. I am sure I told WSUS Offline to only download Windows 7 updates. Anyway I tried to reinstall all the mentioned Updates which was not quite successfull. I was able to reinstall thge following Updates: KB2643719 - Update for Windows Server 2008 R2 KB3031432 - Fix for elevation of priviledge vulnerability from 2015 KB3068457 - Securityupdate for Windows Server 2008 KB3133043 - Securityupdate for NPS RADIUS DoS vulnerability in Server 2008/2012 KB4025337 - Securityupdate for Windows 7 from 2016 KB4025341 - Monthly rollup update july 2017 As you can see I also installed the July Rollup and GP worked without any problems. For all other Updates I got a Error Message saying that this Update cannot be installed on my operating System. So one of these Updates, which were not supposed to be installed in the first place, caused the Error. Now I just wonder why WSUS Offline offered me these for download.. EDIT: I checked WSUS Offline again, if you want to download only Windows 7 Updates you also download Windows Server 2008 R2 Updates, you can't seperate them it seems. I strongly suspect KB3124275 to be the Problem. I hope this is usefull for people with a similar problem. Thanks again and have a nice day!
... View more
08-11-2017
04:52 AM
So I deinstalled the Updates which were different from the working Machine we have here. After every Update-Deinstallation I tested GP to see which Update cause the Problem, but none of them seemed to be the cause.. Then I logged into another User Account which has never been logged in on this Machine. Suddenly GP worked just fine, it connected and asked for credentials. It looks like one ore more deinstalled Windows Update caused the problem, not only that, it also changed the configuration of the Users profile. So once the User profile, which got changed by the bad Update, got written back to the server you have a problem. I probably delte the User Profile and create a completely new one. Updates I deinstalled: KB2393802 KB2525835 KB2534111 KB2643719 KB2656356 KB2706045 KB2716513 KB2719033 KB2758857 KB2765809 KB3018238 KB3031432 KB3068457 KB3075220 KB3076895 KB3124275 KB3133043 KB3148851 KB3153731 KB3169658 KB3177723 KB3182203 KB3203884 KB4012864 One or more of these Updates is probably a Internet / Certificate Update which caused the problem.
... View more
08-10-2017
02:35 AM
Yes at some point I will probably compare the Updates installed on the Machine with the ones from our WSUS. There is one difference I noticed when trying to install the certificate via Web Browser, it gives me this Error: Translation: There was an Error trying to open the Organization trust store. Installing it with the Admin Account works. Furthermore if I try to replace the DNS Name with the IP Adress in GP it gives me this: Translation: Basically saying there is a problem with the security certificate, that's why the identity can't be checked. But I think that is because it is not the DNS Name which the Certificate refers to.
... View more
08-10-2017
01:07 AM
@vsys_remo I hope this helps: I hope you saw Message #14 in which I suspect the Windows Updates to be the problem.
... View more
08-10-2017
12:43 AM
Now I am pretty sure that the Problem comes from the Windows Installation / Updates. We installed two Computers with a new image, in which all the Windows Updates until 08/17 are included. This installation is causing the troubles, every other installation in which we didn't use this updated Image works just fine. So are there any Updates we have to remove in order to make GP work with User rights?
... View more
08-09-2017
10:42 PM
@vsys_remo In the configuration of GP there is only a LDAP Authentification displayed. Allthough you get a popup to accept a certificate from the PA on first time connect. @jdprovine I've never used the Packet Capturing. When I activate Packet Capture it tells me that the systems performance can degrade drastically. I don't think I want to do this. If I would use a Filter I am not sure what to fill in where to capture only traffic from that Windows 7 Machine. Edit: When I try to connect to the Portal via HTTPS, first it asks me to accept the certificate then it says the Web Address can't be reached " ERR_SSL_CLIENT_AUTH_CERT_NO_PRIVATE_KEY". With the Windows Administrator Account this works without problems.
... View more
08-09-2017
04:52 AM
We have LDAP enabled.
... View more
08-09-2017
04:41 AM
I am sorry, yes I can.
... View more
08-09-2017
04:31 AM
Just checked it. There are no Logs listed regarding Global Protect.
... View more
08-09-2017
03:20 AM
I can not reach the Portal via Web Browser. "Can't reach this address". I can ping it. Another Computer in the same Network is able to Connect via Global Protect. Edit: If I try to reach the Website via https it asks me to select a Certificate (there is only one listed) once I press "OK" it opens up the Portal via the Admin Account but not with the normal User.
... View more
08-09-2017
01:41 AM
Hello everybody, recently I am facing a strange Problem with Global Protect. If I log into a Windows 7 Machine (64-bit) with an Administrator Account and enter Credentials of a NON-Administrative Account in Global Protect everything works just fine. But if I log into the Machine with a NON-Administrative Account and try to connect with a NON-Administrative User, Global Protect won't establish the connection. I tried to compare the logs between the Admin and NON-Admin Account, I couldn't find any simularities at all to be honest. The logs seem totally different. Any help in this matter would be highly appriciated!
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-04-2019
03:25 AM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
