About LCMember4717

LCMember4717 · ‎02-07-2019

Hi, i have panorama 8.1.1 managing 4 PA firewalls, am looking for something like workflow for the admins, for example: userA creates a policy on firewall-A it should approved by the Admin of this firewall before commiting or the admin will only be allowed of committing . how can i achieve this with panorama .

LCMember4717 · ‎04-16-2017

hi, thanks for the reply, basiclly the servers are managed by the system admin team which the need to access frequently over regular remote desktop i think, although user-id shows that the user is logged in on from multiple IPs but with remote desktop is different. ill try what you mentioned and see the result .

LCMember4717 · ‎04-13-2017

hi, am having an issue with user-id for users login to servers over RDP, what happens is when user1 login to serverA over RDP and then user2 login to serverA user2 will get the policy of user1. on PAN when i run the command ( show user-id-mapping ip serverA ) it shows user1 login . when i installed the TS-agent on serverA it solved my issue but the question is i have 100+ plus servers so do i have to install TS-agent on all and would PAN accept connection from those server (whats the maximum limit here ). if there is a solution or workound here please share .

LCMember4717 · ‎04-01-2015

Hi Hulk, worked like a charm :smileylove:

LCMember4717 · ‎03-26-2015

hi, am facing a weird issue my app+threat update did not update since 489-2600, nothing changed connectivity exist i tried manually to download from the gui it worked perfectly, even yesterday update is been missed for some reason. although the logs show it contaced the updates.paloaltonetworks.com with no issue but still not downloaded. any hint on this issue ? Regards,

LCMember4717 · ‎12-02-2014

on both nat policy am having the same zone i will change them and test mostly this is the reason

LCMember4717 · ‎12-02-2014

i just noticed am having the same zone for both nat policy :smileycool: will give it a try see. thanks.

LCMember4717 · ‎12-01-2014

hi, i have a pa-3020 with two ISP links, my PBF configuration as follows : for testing when we disable the link for ISP-1 it did a failover but actually no internet browsing, on the NAT there is already two nat policy for each ISP but it did not trigger the nat untill i moved the nat policy for ISP-2 on top then only it works, any hint where could be the issue ?

LCMember4717 · ‎04-28-2014

hi @ssharma, in fact i it does not accept any profile i create ( neither qqq or ai_admin) it keep displaying the error which is quite strange, i even checked if there unsupported characters or spaces in between but still it doesn't work. quite strange for me never had this issue before ( with older panos version).

LCMember4717 · ‎04-22-2014

here is the auth profile

LCMember4717 · ‎04-21-2014

hi recently am creating an admin and linking it with my ad, whenever i click ok i got the attached error,i checked my ldap settings group-mapping auth_profile all correct with no spaces or characters that which could be be a reason, username and password are correct. do i need domain admin ? because i created a normal account, if anybody faced this issue i would be glad if he can share the solution. OS:6.0.1 model:5020 a/pnew setup.

LCMember4717 · ‎11-17-2013

hi , recently i wanted to changed the web-gui certificate i followed the procedure on how to create a certificate in openssl ( for panos 4.x) the certificate created successfully. i event imported into the appliance but whenever i click on the checkbox Certificate for Secure Web GUI i receive the following error system -> web-server-certificate 'cert' is not a valid reference, do i have to upload the main CA cert before uploading the certificate i created ?... appreciate the help. BR

LCMember4717 · ‎11-06-2012

thanks sandeep i believe this is the issue ill try it and test again.

LCMember4717 · ‎11-04-2012

Hi, am running panos 4.1.7 on PA-500 , recently i configure two isp on the pa500 for redundancy , i followed the procedure in DOC-3579 everything is fine except for the source nat policy when clicking on commit , it returns that nat rule1 shadows rule2 which leads to after a failover occurs the source nat for primary isp is taking precedence over the source nat for the secondary isp ,, am having a flat network two internet connections very simple and basic setup . br.

LCMember4717 · ‎07-01-2012

reset both devices and am up and running thanks all for the kind support.

Date Registered	‎10-31-2010 04:12 AM
Date Last Visited	‎05-27-2020 06:21 PM
Total Messages Posted	44
Total Likes Received	1

Online Status	Offline
Date Last Visited	‎05-27-2020 06:21 PM

About LCMember4717

Panorma Admin workflow

Re: User-id with RDP users

User-id with RDP users

Re: scheduled app-update does not download according to schedule

scheduled app-update does not download according to schedule

Does PA-500 supports interface grouping ?

Re: How to Clear Disk Space/reduce disk usage

Aggregate Ethernet interface: LACP and PaGP support

Re: unable to join passive device to ha

Panorma Admin workflow

Re: User-id with RDP users

User-id with RDP users

Re: scheduled app-update does not download according to schedule

scheduled app-update does not download according to schedule

Re: PBF failover happens but users still unable to browse

Re: PBF failover happens but users still unable to browse

PBF failover happens but users still unable to browse

Re: Admins linked with AD

Re: Admins linked with AD

Admins linked with AD

unable to change the web-gui certificate

Re: source nat with dual ISP configuration having issue.

source nat with dual ISP configuration having issue.

Re: unable to join passive device to ha

Network Security

Cloud Security

Security Operations

About LCMember4717