Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About AndyYerger
About AndyYerger
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
11-11-2019
18Posts
3Likes
1Solution
Nov 11, 2019Last Visited
User
Activity
User
Profile
Latest posts by AndyYerger
| Subject | Views | Posted |
|---|---|---|
| 402 | 12-08-2018 01:03 AM | |
| 11130 | 11-30-2018 07:47 PM | |
| 375 | 02-20-2018 09:54 PM | |
| 376 | 02-20-2018 09:54 PM | |
| 419 | 02-19-2018 10:25 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 | 12-07-2017 09:19 AM | |
| 1 | 11-30-2018 07:47 PM |
User Badges
Public Statistics
| Date Registered | 09-28-2017 02:44 PM |
| Date Last Visited | 11-11-2019 08:59 PM |
| Total Messages Posted | 18 |
| Total Likes Received | 3 |
11-30-2018
07:47 PM
1 Kudo
Yes a rule would help. Go to security policy in Polices the Security tab and create a rule for your WSUS server and make sure the file blocking policy in that rule is off . Then move that rule to the top of your security policies right under any block rules you may have in those policies.
... View more
02-17-2018
03:23 PM
When you generate a certificate for your login page on the Palo Alto and it is signed by a self signed CA... if you created an OCSP reponder should that responder be added to the certificate when you create that certificate for the Palo Alto login page? Thanks Andy
... View more
02-17-2018
03:15 PM
Question is it possible to create and use a dns proxy when in vwire mode. I would think that a vlan with an ip would need to be created in Interfaces- Vlan to facilitate this. Thought I would query to see if anyone had tried this. One issue that comes to mind is vwire layer 2, vlan with ip layer three probably will not work but I'm curiuos. Thanks Andy
... View more
02-17-2018
02:57 PM
Try adding tose to your custom url then add that to no decrypt. I got it working by doing this. Andy
... View more
12-19-2017
03:48 PM
After upgrading to 8.0.6 Dynamic Updates was showing 4 to 5 previous updates for download and install in each column of dynamic updates . I downgraded back to 8.04
... View more
12-19-2017
03:43 PM
Thanks for the reply food for thought.
... View more
12-07-2017
09:47 AM
My question would it be important to add protocol protection in Zone Protection if you are running layer 2 or vwire on you palo alto fiewalll? and if so should it be placed on untrust or trust or both?
... View more
12-07-2017
09:36 AM
I'm running a Virtual Wire and it works for me. Question did you create a Seurity Policy block or deny rule for the specific regions in question?
... View more
12-07-2017
09:26 AM
Question what pan os version are you using . I'm on 8.0.x and it has a built in External Block list that you can add to your Security rules.
... View more
12-07-2017
09:19 AM
2 Kudos
Go to Objects ,File Blocking and create a new File Blocking policy. In that policy add in Application ms-update then the next tab File Types add PE and allow . Then Go to security policy in Polices the Security tab and create a rule for your WSUS server and make sure the file blocking policy in that rule is off or you use the new File Blocking policy you created.
... View more
12-07-2017
08:58 AM
One other way to import that certicate into your machine if using Windows is through MMC cosole Certificates. Or right click the certifacte and choose install. You can't decrypt all SSL just most of it. Normal behovior to see some decrypted some not decrypted. As for Alerts you could go to Deviced logs then the System tab and create a log with a serverity level and forward to an email. As for blocking the decryption profile only blocks unsupported ciphers, unsupported cipher suites, expired certificates ,unknown certificates, certificate timeouts and if the firewall has exhausted it resources and is low on memory cpu . So the decryption profile wouldn't block everything . Someone please correct me if I'm wrong.
... View more
10-23-2017
06:11 PM
Also forgot stick that dhcp rule at the top of the security policy list.
... View more
10-23-2017
06:10 PM
Quick question on your vwire did you create an untrust zone and a trust zone? That is what I did and I had the same issue. I created a security policy rule from untrust to trust on my vwire with only the application dhcp and that worked for me. Andy
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
