This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About ra7oub4
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About ra7oub4
05-17-2021
14Posts
1Like
0Solutions
May 17, 2021Last Visited
User
Activity
User
Profile
Latest posts by ra7oub4
| Subject | Views | Posted |
|---|---|---|
| 2257 | 12-17-2019 02:21 AM | |
| 2096 | 07-19-2019 02:15 AM | |
| 4622 | 05-27-2019 04:04 AM | |
| 4627 | 05-27-2019 03:33 AM | |
| 4665 | 05-27-2019 01:48 AM | |
| 5380 | 06-06-2018 09:39 AM | |
| 5402 | 06-06-2018 04:24 AM | |
| 5666 | 05-30-2018 03:07 AM | |
| 5807 | 05-30-2018 02:10 AM | |
| 1549 | 09-28-2017 08:29 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 09-23-2017 05:15 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 09-14-2017 01:21 AM |
| Date Last Visited | 05-17-2021 11:04 AM |
| Posts | 14 |
| Total Likes Received | 1 |
12-17-2019
02:21 AM
Hello, Can I set up a HA between PA-500 and PA-220? I searched a response to my question in the PA documentations but I found that it is required to have two same model of Palo Alto Networks: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClrsCAC Can you please confirm this answer to my question ? Thank you in advance. Best Regards,
... View more
07-19-2019
02:15 AM
Hello, We have a server on the DMZ zone and another server in the other DMZ site. We need to allow traffics between the two DMZ zones with the MPLS connection. I don’t know how can I put this configuration on my PA firewall or maybe I should contact my MPLS provider to do this act on the MPLS router? I will appreciate your help or suggestion to solve this issue. Best Regards,
... View more
- Tags:
- dmz
- MPLS connection
05-27-2019
04:04 AM
hello @Chacko42 , Thank you very much for your help . It work actually , It's a problem on the service of the security rules on the firewall. Really thank you very much for your quick response . Have a nice day,
... View more
05-27-2019
03:33 AM
Hello @Chacko42 , Thank you for your response . You find below the response on your questions: What exactly does not work? ==> we define a DNS name in our DNS server for example : intranet.com to reach the address of aour server 3.3.3.3 . With VPN connection , I can't access to the intranet.com (not response ) only the IP address reply. If i change the file hosts on the PC , I can't access to this dns name . If you type in nslookup - is the DNS server used, you configured in the agent settings? Yes , with nslookup our internal DNS response . Do you receive a timeout? Yes , timeout with DNS name of server Do you have a according security policy, which allows your GlobalProtect client zone to query the DNS server? yes Can you see the dns traffic? yes I see the dns traffic on the firewall
... View more
05-27-2019
01:48 AM
Hello, I have configured the PA-500 firewall with VPN client to site tunnels . The VPN tunnels work correctly but i can't reach the local servers name on the DNS. I add our local DNS address on the agent gateway setting of Global Protect without result. Should I add another configuration to reach the record local DNS? Thanks in advance for your collaboration.
... View more
06-06-2018
09:39 AM
Hello , Yes, I configured this security rule without result . I allow trafic: From : VPNZone InternalZone source: any TO: InternalZone VPNZone destination: any application:any service: any action: allow Should I modify the destination to any?
... View more
- Tags:
- llo
06-06-2018
04:24 AM
Hello @kiwi @LukeBullimore Thank you for your response . I try to configure the VPN in another Zone called VPNZone without result. I found this logs in the monitor tab: IKE protocol IPSec SA delete message sent to peer. IKE daemon configuration load phase-2 succeeded IKE daemon configuration load phase-1 succeeded IKE daemon configuration load phase-1 aborted IKE daemon configuration load phase-2 aborted Installed SA: 1.1.1.1[500]-2.2.2.2[500] SPI:0xBC2E363C/0xCAE56096 lifetime 3600 Sec lifesize unlimited I will appreciate all your help Thank you!
... View more
05-30-2018
03:07 AM
Hello @kiwi Thank you for your reply . Yes I configure the necessary route . I follow all the steps listed in this article https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-IPSec-VPN/ta-p/56535 In the logs, I found this information : IKEv2 child SA negotiation is started as initiator, rekey. Initiated SA: x.x.x.x[500]-y.y.y.y[500] message id:0x00000000. IKEv2 child SA negotiation is started as initiator, rekey. Initiated SA IKEv2 IPSec SA delete message sent to peer. Protocol:ESP, SPI:0x982EEEEA Have you any suggestion to do . Thanks
... View more
05-30-2018
02:10 AM
Hello, I configure a VPN tunnel between two firewalls Palo alto Networks . The tunnel status is up but the other network is unreacheable. I configure the tunnel on the trust zone . I restart the firewalls without result . The first PA-500 with PANOS 7.1.0 and the second with PANOS 8.0.3 Should I do an upgrade to the OS? Or there is any suggestion to do ? I will appreciate your helps. Thank you
... View more
09-28-2017
08:29 AM
Hello, I have a problem with the Palo Alto Networks logs . The logs are appear every 10 seconds . I need to see the logs in real time. There is any command that let me see the logs in real time? Thank you very much.
... View more
09-28-2017
08:26 AM
Hello, Thank you very much for your helps. The problem is solved . Thank you very much for all your response.
... View more
09-27-2017
02:57 AM
Hello, I have configured the users in the office to be identify with Active Directory. I can see the users identification in the Monitor tab. But when i set a rule with user AD identifier don't work! I add two rules : rule 1: deny access for a specific AD users to social networks rule 2: allow access to any users (internet access). The first rulee always don't take effect . I saw the users always access to all sites with the second rule. There is any suggestion please . Thank you for help.
... View more
09-23-2017
05:15 AM
1 Kudo
@kiwiThank you very much for your response . The issue is solved by add another rule of NAT in the inverse (from wan to lan ) with "None" action in the translation . Thanks . Have a nice day
... View more
09-14-2017
01:28 AM
Hello, I have a VOIP server in the enternal LAN related to other site . I need to do a NAT to the traffic in the LAN and not this server . How can I set up the exempt NAT in Palo Alto Networks? I add two rules in PAN: First rule : No NAT for the source ( address IP of this server ) destination (WAN) Second rule :: PAT NAT : source (any ) destination (WAN) translated to untrust interface. But always we are blocked to communicate with other servers with those rules. Please i need your help to solve this problem. Thank you very much.
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks