Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About LCMember4717
About LCMember4717
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
02-07-2019
05:48 AM
Hi, i have panorama 8.1.1 managing 4 PA firewalls, am looking for something like workflow for the admins, for example: userA creates a policy on firewall-A it should approved by the Admin of this firewall before commiting or the admin will only be allowed of committing . how can i achieve this with panorama .
... View more
04-16-2017
12:29 AM
hi, thanks for the reply, basiclly the servers are managed by the system admin team which the need to access frequently over regular remote desktop i think, although user-id shows that the user is logged in on from multiple IPs but with remote desktop is different. ill try what you mentioned and see the result .
... View more
04-13-2017
06:40 AM
hi, am having an issue with user-id for users login to servers over RDP, what happens is when user1 login to serverA over RDP and then user2 login to serverA user2 will get the policy of user1. on PAN when i run the command ( show user-id-mapping ip serverA ) it shows user1 login . when i installed the TS-agent on serverA it solved my issue but the question is i have 100+ plus servers so do i have to install TS-agent on all and would PAN accept connection from those server (whats the maximum limit here ). if there is a solution or workound here please share .
... View more
04-01-2015
10:46 PM
Hi Hulk, worked like a charm :smileylove:
... View more
03-26-2015
04:30 AM
hi, am facing a weird issue my app+threat update did not update since 489-2600, nothing changed connectivity exist i tried manually to download from the gui it worked perfectly, even yesterday update is been missed for some reason. although the logs show it contaced the updates.paloaltonetworks.com with no issue but still not downloaded. any hint on this issue ? Regards,
... View more
Labels:
12-02-2014
01:35 AM
on both nat policy am having the same zone i will change them and test mostly this is the reason
... View more
12-02-2014
01:34 AM
i just noticed am having the same zone for both nat policy :smileycool: will give it a try see. thanks.
... View more
12-01-2014
06:57 AM
hi, i have a pa-3020 with two ISP links, my PBF configuration as follows : for testing when we disable the link for ISP-1 it did a failover but actually no internet browsing, on the NAT there is already two nat policy for each ISP but it did not trigger the nat untill i moved the nat policy for ISP-2 on top then only it works, any hint where could be the issue ?
... View more
Labels:
04-28-2014
07:21 AM
hi @ssharma, in fact i it does not accept any profile i create ( neither qqq or ai_admin) it keep displaying the error which is quite strange, i even checked if there unsupported characters or spaces in between but still it doesn't work. quite strange for me never had this issue before ( with older panos version).
... View more
04-21-2014
06:58 AM
hi recently am creating an admin and linking it with my ad, whenever i click ok i got the attached error,i checked my ldap settings group-mapping auth_profile all correct with no spaces or characters that which could be be a reason, username and password are correct. do i need domain admin ? because i created a normal account, if anybody faced this issue i would be glad if he can share the solution. OS:6.0.1 model:5020 a/pnew setup.
... View more
11-17-2013
10:21 AM
hi , recently i wanted to changed the web-gui certificate i followed the procedure on how to create a certificate in openssl ( for panos 4.x) the certificate created successfully. i event imported into the appliance but whenever i click on the checkbox Certificate for Secure Web GUI i receive the following error system -> web-server-certificate 'cert' is not a valid reference, do i have to upload the main CA cert before uploading the certificate i created ?... appreciate the help. BR
... View more
11-06-2012
10:57 PM
thanks sandeep i believe this is the issue ill try it and test again.
... View more
11-04-2012
11:29 AM
Hi, am running panos 4.1.7 on PA-500 , recently i configure two isp on the pa500 for redundancy , i followed the procedure in DOC-3579 everything is fine except for the source nat policy when clicking on commit , it returns that nat rule1 shadows rule2 which leads to after a failover occurs the source nat for primary isp is taking precedence over the source nat for the secondary isp ,, am having a flat network two internet connections very simple and basic setup . br.
... View more
07-01-2012
02:35 AM
reset both devices and am up and running thanks all for the kind support.
... View more
06-28-2012
08:00 AM
hi, am unable to join the 2nd device to a cluster its new setup HA active/passive the error msg am getting is failed to push config: timeout .
... View more
06-17-2012
02:22 PM
AM testing the one arm routing do I need to have PBF to instruct the traffic to leave from the same interface again because it's reaching the PA but it drops then . Thanks.
... View more
06-13-2012
04:13 AM
if we can do in vwire it would be great , but can you explain more please..
... View more
06-12-2012
08:23 AM
hi all, i need to setup two PA-2050 ( HA mode ) but am not sure about the design were i need some help her, the customer network is devided into vlans and they all communicato to each other through the corre switch ( cisco 6500) and if they require internet access the core switch will route them to a firewall ( firewall module in the core sw ) , now obviously i cant setup the appliances in vwire mode since there are no physical cables ( all virtual links and vlan ) so i was thinking to make a defult route on the customer switch to redirect internet traffic to the PA device then it routes back to the core sw , not wccp as i know they call this one leg setup am just wondering if it can achieved by the PA appliance . am attaching a diagram of what am looking for .
... View more
05-01-2012
07:10 AM
it looks starting from 4.1.4 mp3 and mp4 can be added to file blocking profiles, i will test and update here guys.
... View more
01-08-2012
12:18 AM
well i dont think this even will work.. even if i tried to block a url with *.mp3 it wont work as some sites hide the extension from the url ..
... View more
01-03-2012
05:52 AM
hi, it did not work for the site which am testing for ill attach the screenshot, i also did several test on other site some of them show the extension up to .mp3 some not ...
... View more
01-02-2012
06:30 AM
hi , i just got a request from a custoer on how to block mp3.. so as currently PanOS doesnt detect it , can we add it as a signature ? BR
... View more
12-20-2011
11:03 PM
what if i created a subinterfaces or it requires physical dedicated interfaces , am thinink to create a vlan on the switch for HA sessions create subinterfaces from single interface tag them with vlan id ?
... View more
12-19-2011
04:09 AM
hi, i have two PA500 appliances am looking to configure them on HA mode , with my current setup i have utilized all 7 ports so one port left for me , as per the documents for HA ( A/A , A/P ) you need 3 or 2 ports to achieve the configuration... so is there a way to achieve HA ( A/P ) with single HA port ? because if not i have to re-setup the appliance to free up two ports for HA :smileygrin:
... View more
12-07-2011
12:25 AM
thanks for the reply, i'll use the command with dates as i think its more accurate to what i want . thanks for reply.
... View more
12-04-2011
03:29 AM
hi, am running a PoC for a custoemr and am looking can i customize the avr report for a specific period of time lets say my poc is running for tw weeks and i need each week to have independent avr report ? BR
... View more
10-06-2011
06:41 AM
hi, i have some inquiries just recieved from a customer i dont think its possible but lets see if its achievable : .1- can we convert second to minute in reporting. 2- can we convert bytes to Mbytes in reporting . i tried but could not find anything. BR
... View more
09-21-2011
05:22 AM
Hi , currently am using the pan-agent for integrating with active-directory and the integration is fine, the issue is it only displays the username NOT the display name where it could affect the reports . for example username : sales_1 --> display name : John ... in the reports it will show sales_1 not john, so is there a way to override this issue or its by design.
... View more
05-04-2011
02:44 PM
hi, recently i connected two sfp on my 2020 but under interfaces cant see there status,, is there a command to enable them or checking the status,,, one last thing i connected the sfp while the system is online does it affect ? BR
... View more
3 weeks ago
44Posts
1Like
0Solutions
Mar 08, 2020Last Visited
User
Activity
User
Profile
Latest posts by LCMember4717
| Subject | Views | Posted |
|---|---|---|
| 276 | 02-07-2019 05:48 AM | |
| 287 | 04-16-2017 12:29 AM | |
| 307 | 04-13-2017 06:40 AM | |
| 542 | 04-01-2015 10:46 PM | |
| 583 | 03-26-2015 04:30 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 04-25-2011 02:23 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 2 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 10-31-2010 04:12 AM |
| Date Last Visited | 3 weeks ago |
| Total Messages Posted | 44 |
| Total Likes Received | 1 |
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
