About AllwynMascarenhas

Hi,   So we want to block file uploads on WhatsApp but since it's encrypted, I doubt this can be done, however, can PANOS decrypt WhatsApp??   I ask because WhatsApp doesn't exactly use SSL right, it's more of a PGP sort of encryption, can we decrypt that? ... View more

Hello,   So as the title says, but the catch is this is not consistent - one user we tested with GP client 5.2.7 and .10 and .4 and he logs in without the credentials prompt.   But for others with 5.2.4 it keeps prompting for login after every time it disconnects..   This should be a good thing right, but oh well, their users are complaining so they want it to be to be logged in automatically..   PANOS 9.0.3 ... View more

Hi,   In this tunnel with a FortiGate, I see the FGT sends its peer id as a local IP and not as the IP which takes part in the tunnel ..    So I just modified the peer identification for the local PA to match the FGT private IP peer IP and the tunnel has come up.                ... View more

Hi, What we are trying to do is block domain.com but allow domain.com/api/something1   I tried this in the lab and I'm thinking nope it can't do it, even with SSL decryption it doesn't work! ... View more

These errors just don't make sense to me, I have followed everything as required.   I am currently doing this in my lab and I'm stuck with this error about permissions, I have given permisions for event log readers, server operators and distributed com users.   Any ideas on what's missing?   I have installed the agent on win7 and the AD is on win srv 2012.   09/30/18 23:59:40:445[ Info 2145]: ------------Service is being started------------ 09/30/18 23:59:40:445[ Info 2152]: Os version is 6.1.1. 09/30/18 23:59:40:445[ Info 608]: Load debug log level Info. 09/30/18 23:59:40:445[ Info 557]: Service version is 8.0.10.7. 09/30/18 23:59:40:445[ Info 611]: Product version is 8.0.10. 09/30/18 23:59:40:460[ Info 1132]: Found 0 ACL config. 0 processed. 09/30/18 23:59:40:460[ Info 1160]: Found 0 VM info source config. 0 processed. 09/30/18 23:59:40:460[ Info 1168]: Found 0 Syslog Profile(s) config. 09/30/18 23:59:40:460[ Info 1230]: Found 1 server config. 09/30/18 23:59:40:460[ Info 1265]: Found 0 include-exclude networks. 0 processed. 09/30/18 23:59:40:460[ Info 1290]: Found 0 custom log format config. 09/30/18 23:59:40:460[ Info 1297]: No xml element servercert. 09/30/18 23:59:40:460[ Info 148]: Load 8 build-in formats and 0 custom formats for parsing security log. 09/30/18 23:59:40:460[ Info 345]: DC security log and session query threads for server   dc.akmlab.com(index 0) are started. 09/30/18 23:59:40:460[ Info 707]: Active Directory gets started. 09/30/18 23:59:40:460[ Info 742]: User-ID VM monitor service started. 09/30/18 23:59:40:460[ Warn 923]: Unsupported file format for UserIpMap.txt. We support ANSI and UTF-8 format. 09/30/18 23:59:40:913[Error 115]: Cannot open security log for DC   dc.akmlab.com   - A required privilege is not held by the client.   09/30/18 23:59:41:084[ Info 1241]: New connection   127.0.0.1   : 57678. 09/30/18 23:59:41:084[ Info 1314]: Device thread 0 with   127.0.0.1   : 57678 is started. 09/30/18 23:59:41:178[ Info 3396]: Device thread 0 accept finished ... View more

I am planning on using the migration tool to conver the config from pa500.   To do this once I get the same firmware on both the boxed do I also have to import the base config from the pa820 to the migration tool?   I also read somewhere something about the code versions on both the firmwares, how does the migration tool figure out the code versions during the conversion? ... View more

Hi   We are using panorama 7.1.11 to commit to a pa-2050 on 6.0.1.   The commit keeps failing both form panorama and firewall.   This is the error in the commit window and I see not such options for a setting like log fwding - profiles!   Appreciate any help guys! ... View more

Hi Guys,   I am running a PA VM with a VM-100 license on vmware workstation 12.5.    I have the mgmt interface bridged to my network and can access the PA GUI, CLI and the internet.    For my internal interface i have setup eth 1/2 to vmnet3 and unchecked the "connect as host only adapter".   Also on the vmnet3 i have setup a DSL(**bleep** small linux) linux machine to simulate a client, and assigned a ping allow using int mgmt profile to the eth1/2 interface.    But yet in the end i cannot ping the interface at all, nor can i ping the dsl machine from the PA-VM.    A pcap from the PA shows that the eth1/2 interface never replies to the arp from the DSL client machine.    Any help is really appreciated.    ... View more