This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About charles07
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About charles07
03-31-2021
23Posts
0Likes
0Solutions
Mar 31, 2021Last Visited
User
Activity
User
Profile
Latest posts by charles07
| Subject | Views | Posted |
|---|---|---|
| 3314 | 03-26-2021 06:18 AM | |
| 3597 | 03-25-2021 09:14 PM | |
| 3651 | 03-23-2021 09:15 PM | |
| 3865 | 03-23-2021 06:00 AM | |
| 3751 | 03-12-2021 09:50 PM | |
| 2369 | 02-16-2021 06:15 AM | |
| 2418 | 02-15-2021 10:18 PM | |
| 1317 | 10-01-2020 05:27 AM | |
| 1372 | 09-24-2020 05:11 AM | |
| 3442 | 09-21-2020 09:57 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes | |||
| 2 Likes | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 08-16-2017 04:25 AM |
| Date Last Visited | 03-31-2021 05:49 AM |
| Posts | 23 |
03-26-2021
06:18 AM
thnak you @sebastianvd can the configuration done in such a way, Globalprotect does not get connected if HIP profile fails.
... View more
03-25-2021
09:14 PM
Thank you @BPry does that mean Globalprotect gets connected even if system is non-compliant. Traffic can be denied for non-complaint systems.
... View more
03-23-2021
09:15 PM
If the DLP agent is not found, Globalprotect VPN should not get connected.
... View more
03-23-2021
06:00 AM
Using Globaprotect to connect remotely. Enabled HIP profile for compliance check. Users get connected even if the endpoints are non-compliant. I configured HIP profile to check whether remote machines has DLP agent installed. GP gets connected with notification "DLP agent not found". below are the GP logs. ----------------------------- P14072-T17108)Debug( 139): 03/23/21 18:03:31:414 Got hip report in other process ready event. (P14072-T17108)Debug( 158): 03/23/21 18:03:31:414 Read output from PanGpHip.exe (P14072-T17108)Debug( 195): 03/23/21 18:03:31:414 write hip file now (P14072-T17108)Debug( 226): 03/23/21 18:03:31:414 CheckHipInOtherProcess() sets hip report ready event. (P14072-T17108)Debug( 135): 03/23/21 18:03:31:414 Wait for the ready event of hip report generated in other process. (P14072-T6184)Debug(6048): 03/23/21 18:03:31:414 HipReportThread: got HIP report ready event. (P14072-T6184)Debug(6064): 03/23/21 18:03:31:414 HipReportThread: wait for network discover ready event. (P14072-T6184)Debug(6069): 03/23/21 18:03:31:414 HipReportThread: got network discover ready event. (P14072-T6184)Debug(8135): 03/23/21 18:03:31:460 use cached deviceSN (P14072-T6184)Debug(6149): 03/23/21 18:03:31:460 Sending hip report delay max registry setting is -1 seconds (P14072-T6184)Debug(6151): 03/23/21 18:03:31:460 Set max sending hip report delay to default 1800 seconds (P14072-T6184)Debug(6167): 03/23/21 18:03:31:460 v3 hip report is encoded (P14072-T6184)Debug(6182): 03/23/21 18:03:31:460 v4 hip report is encoded (P14072-T6184)Debug(6205): 03/23/21 18:03:31:460 HIP report v3 md5 digest is d9df91f4e03c9fee9f68707d17649756 (P14072-T6184)Debug(6237): 03/23/21 18:03:31:460 HIP report v4 md5 digest is 4e4b72bd4053b7e9d85e6d08e4b361e (P14072-T6184)Debug(6265): 03/23/21 18:03:31:460 HipReportThread: network type is external network. (P14072-T6184)Debug(1706): 03/23/21 18:03:31:460 Send v4 hip report to gateway GATEWAYIP (P14072-T6184)Debug(4827): 03/23/21 18:03:31:460 Entering SendHipReportToGateway(). Gateway: GATEWAYIP (P14072-T6184)Debug( 799): 03/23/21 18:03:31:460 m_bScheduleFlag is 1 (P14072-T6184)Debug( 809): 03/23/21 18:03:31:460 m_bScheduleFlag is set to 1 (P14072-T6184)Debug(4852): 03/23/21 18:03:31:460 Gateway GATEWAYIP: now is 1616502811, next hip checking is 0, next hip report check sending time is 1616506404, last hip report check sending time is 1616502804, sending hip delay is 0 ms (P14072-T6184)Debug(4869): 03/23/21 18:03:31:460 Wait for 0 ms to send hip report check to gateway GATEWAYIP (P14072-T6184)Debug(4882): 03/23/21 18:03:31:460 Time to send hip report to gateway GATEWAYIP (P14072-T6184)Debug(3027): 03/23/21 18:03:31:460 Gateway: GATEWAYIP, client IP: LOCALIP (P14072-T6184)Debug(4899): 03/23/21 18:03:31:460 Hip report head to gateway GATEWAYIP is (P14072-T6184)Debug(5078): 03/23/21 18:03:31:460 SendHipReportNReceive() (P14072-T6184)Debug(5100): 03/23/21 18:03:31:460 bUseCCUser=0, ccUserName=, m_userName=vpnpa (P14072-T6184)Debug(5109): 03/23/21 18:03:31:460 latency report data=&pretunnellatency=184ms&posttunnellatency=172ms (P14072-T6184)Debug(5114): 03/23/21 18:03:31:460 using https to send hip report check to gateway GATEWAYIP (P14072-T6184)Debug(8135): 03/23/21 18:03:31:460 use cached deviceSN (P14072-T6184)Debug(5156): 03/23/21 18:03:31:460 Network discover SN 71 remains same. (P14072-T6184)Debug( 788): 03/23/21 18:03:31:462 SSL connecting to GATEWAYIP (P14072-T6184)Debug( 563): 03/23/21 18:03:31:475 Network is reachable (P14072-T6184)Debug(4742): 03/23/21 18:03:31:850 SSL verify succeed (P14072-T6184)Debug(1350): 03/23/21 18:03:32:234 OpenSSL alert write:warning:close notify (P14072-T6184)Debug(5169): 03/23/21 18:03:32:234 Gateway GATEWAYIP, response to the hip report check: <response status="success"> <hip-report-needed>no</hip-report-needed> <delay>0</delay> </response> (P14072-T6184)Info (5171): 03/23/21 18:03:32:234 sent HIP report check to GATEWAYIP. (P14072-T6184)Debug(5199): 03/23/21 18:03:32:235 Response status of HIP report check is success, gateway GATEWAYIP (P14072-T6184)Debug(5201): 03/23/21 18:03:32:235 Hip report check returns success. (P14072-T6184)Debug(4913): 03/23/21 18:03:32:235 SendHipReportNReceive returns TRUE for gateway GATEWAYIP (P14072-T6184)Debug(4927): 03/23/21 18:03:32:235 Hip notification is empty in the HIP report check response from gateway GATEWAYIP (P14072-T6184)Info (4949): 03/23/21 18:03:32:235 Hip report is not needed for gateway GATEWAYIP. (P14072-T6184)Debug(4986): 03/23/21 18:03:32:235 SSL is disconnected. Returns TRUE. (P14072-T6184)Debug(1708): 03/23/21 18:03:32:235 SendHipReportToGateway GATEWAYIP returns TRUE. (P14072-T16960)Debug(2392): 03/23/21 18:03:32:235 Setting debug level to 5 (P14072-T6184)Debug(1142): 03/23/21 18:03:32:236 Display hip report V4 on the UI (P14072-T6184)Debug(1151): 03/23/21 18:03:32:252 Hip report changed. Include it in status message to client. (P14072-T6184)Debug(6043): 03/23/21 18:03:32:253 HipReportThread: wait for HIP report ready event. (P14072-T17108)Debug( 143): 03/23/21 18:03:32:739 Got event for PanGpHip process has quited. (P14072-T17108)Debug( 338): 03/23/21 18:03:32:739 CheckHip over (P14072-T17108)Debug( 282): 03/23/21 18:03:32:739 Hip checking is not initiated by clicking resubmit host profile. (P14072-T17108)Debug( 216): 03/23/21 18:03:32:739 HipCheckThread: wait for hip check event for 3600000 ms);
... View more
03-12-2021
09:50 PM
we are using PA Globalprotect for Remote VPN users. Currently planning to implement Cisco ISE posture for RVPN clients. how can I integrate Globalprotect with Cisco ISE posture module.
... View more
02-16-2021
06:15 AM
Thank you @reaper Proxy is not transparent. I liked your idea on WCCP in the switch. Let me R&D on it's feasibility. Core-switch is Cisco. WCCP can forward traffic to WSA. From the WSA I hope traffic can be forwarded to gateway firewall or back to core switch.
... View more
02-15-2021
10:18 PM
Hi Am trying to integrate Palo Alto NGFW with proxy web security appliance (Forcepoint WSA). Can palo alto PBF used to send web traffic traffic requests. All we are trying is to implement proxy transparently. Is there any equivalent of WCCP in Palo Alto.
... View more
10-01-2020
05:27 AM
Thank you, I have given full access in the VPC endpoint policy. { "Statement": [ { "Action": "*", "Effect": "Allow", "Resource": "*", "Principal": "*" } ] }
... View more
09-24-2020
05:11 AM
Thank you @jmeurer sorry for the late replies. am bugging around AWS networks & firewall. I tried from Windows system in the same subnet as of VPC endpoint. Tried with API URL and endpoint IP, Both showing forbidden error. Screenshots below. With IP With URL Let me try on API GW settings.
... View more
09-21-2020
09:57 PM
Hi @jmeurer Bastion host is not able to resolve the APIgw private URL. I gave 172.31.0.2 as DNS server for bastion host, still not resolving. FW trust side IP is 172.16.99.x, VPC endpoint too 172.16.99.x and bastion host 172.16.99. I read in various other forums "each endpoint also requires a valid API key supplied on a x-api-key HTTP header. If not present or valid, the APIs will return a 403 (Forbidden)" https://codeburst.io/aws-api-gateway-by-example-3733d7792635
... View more
09-21-2020
05:38 AM
It's through the firewall.
... View more
09-20-2020
10:35 AM
screenshot attached
... View more
09-19-2020
05:42 AM
Thank you @jmeurer hard word paid off, now am able to load the lamda function result, although it's showing {"message":"Forbidden"} so happy at-least traffic reaching APiGW. If you have any idea why forbidden error, please share.
... View more
09-16-2020
06:57 AM
Thanks, It seems the luck has not turned yet. This is my NAT statement. i used this doc to create private API and endpoint https://aws.amazon.com/premiumsupport/knowledge-center/api-gateway-private-cross-account-vpce/ If i try https://PAWANPublicIP/test/ nothing loads I tried creating new APi with this doc (change i created a private API) https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-create-api-as-simple-proxy-for-lambda.html If i try https://PAWANPublicIP/test/helloworld?name=John&city=Seattle nothing loads No idea why is this happening, still trying the luck
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-31-2021
05:49 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks