This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About jambulo
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About jambulo
Online
112Posts
24Likes
2Solutions
Jun 30, 2022Last Visited
User
Activity
User
Profile
Latest posts by jambulo
| Subject | Views | Posted |
|---|---|---|
| 158 | 05-16-2022 08:44 AM | |
| 854 | 08-04-2021 06:25 AM | |
| 2279 | 11-27-2020 10:33 AM | |
| 10518 | 04-06-2020 01:42 PM | |
| 4232 | 02-14-2020 11:33 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 03-09-2018 06:36 AM | |
| 3 Likes | 02-28-2019 01:37 PM | |
| 1 Like | 03-07-2018 02:00 PM | |
| 1 Like | 04-10-2017 12:07 PM | |
| 1 Like | 02-28-2017 01:32 PM |
User Badges
Community Statistics
| Member Since | 11-08-2010 11:51 AM |
| Date Last Visited | 06-30-2022 03:24 AM |
| Posts | 112 |
| Total Likes Received | 24 |
05-16-2022
08:44 AM
I'm trying to set up an Internal Gateway for GlobalProtect, and am finding that GP does not connect to the Internal Gateway if the Connect Method is set to "On-demand". It works just fine if I set it to "Always-on". Is this the way it's supposed to work or am I missing something?
... View more
08-04-2021
06:25 AM
We are testing SSL decryption and are finding that Macs are getting a certificate warning page when visiting https://www.apple.com. The warning says "This website may be impersonating "www.apple.com" to steal your personal or financial information". These Macs do trust our Root CA, so it's not that. I put "www.apple.com" in the SSL Decryption Exclusion list and that resolved it. Anyone know what is causing this warning? Is it certificate pinning? A couple of our Mac testers also reported that they could not download the Big Sur update over GlobalProtect(www.apple.com was not yet in the exclusion list). Does the Palo need www.apple.com(and maybe others) added to the SSL Decryption Exclusion list in order for Mac updates to work?
... View more
- Tags:
- apple
- SSL Decryption
11-27-2020
10:33 AM
We recently ran into a bug where the Palo was not logging some traffic if it hit a rule that did not have Zones defined. Does your security rule happen to not have Zones defined?
... View more
04-06-2020
01:42 PM
Has anyone found a fix for this? I can confirm, with full tunnel VPN MS Office thinks there is no internet. With split tunnel VPN MS Office can see that there is an internet connection.
... View more
02-14-2020
11:33 AM
Not sure if this is still being updated/supported, but you can try the Pan(w)achrome Chrome plugin.
... View more
02-14-2020
11:30 AM
In the last few days we've been getting a ton of FP's. None of these files are related in any way, but one commonality we did find was Wildfire was keying on these 2 things: 1) Http request without User-Agent 2) HTTP GET requests to x.x.x.x/wpad.dat (x.x.x.x being the same IP every time). Also, our WF500 appliance is reporting all of these FP's. If we upload the same file to the WF cloud, the files come back as benign. I have a ticket open with support and they have escalated it to engineering.
... View more
08-09-2019
07:55 AM
I have a similar issue with GlobalProtect 5.0.3 and Duo MFA. Not sure if everyone is aware how Duo MFA works with GlobalProtect, but instead of enter in a one-time passcode, you can enter in the number "1" and Duo will send a push notification to your mobile device. Well, I entered in "1", never got the push notification(not sure why), but this caused the GlobalProtect client to get stuck at "Still Working...". I waited 25 minutes and the client never timed out, it just kept trying.
... View more
02-28-2019
01:43 PM
From what I understand, Palo Alto has templates on Github you can use to deploy the PA in an existing Azure environment(without using the marketplace). https://docs.paloaltonetworks.com/vm-series/7-1/vm-series-deployment/set-up-the-vm-series-firewall-in-azure/use-the-arm-template-to-deploy-the-vm-series-firewall.html#
... View more
02-28-2019
01:37 PM
3 Kudos
You can create a Custom URL Category with an entry of "*.*" (not including the quotes). This will log URL's without the license. It just will not(obviously) categorize them.
... View more
08-21-2018
10:52 AM
Are the subnets equal to each other? Not sure what you mean. Will you generally allow traffic between the subnets? Generally will not allow traffic between subnets. Are the subnets contain different group of servers? (One subnet for linux and one for windows for example) Subnets can contain different types of servers, but mainly are separated by the functions that the servers provide. Do you plan to configure generic zone firewallrules or do you configure specific rules for each server? Specific rules for each server.
... View more
08-17-2018
04:34 PM
If you have a DMZ behind the Palo and it contains multiple VLANs or sub-interfaces, would you create multiple Zones(one for each VLAN)? Or create a single "DMZ" zone and apply that to all of the VLANs?
... View more
07-30-2018
01:57 PM
You can do this with a single Portal. You could put the Portal on a loopback interface on the Palo(with a private IP). Internal users will access the Portal via internal IP, external users would NAT to the internal IP.
... View more
07-27-2018
07:16 AM
We use our SNMP monitoring tool to send HTTP request to the Portal/Gateway. If it does not get a response, we get alerted.
... View more
06-26-2018
08:47 AM
I would do... - LDAP only on the Portal - RADIUS(OTP) on the Gateway ...Enabling 2-factor on the Portal may cause your users to have to enter in a OTP even when on your internal network. Is your OTP solution capable of authenticating LDAP as well? (ex. LDAP+OTP over the RADIUS protocol).
... View more
05-16-2018
06:30 AM
I had this same issue, but with GP 4.1 only(and on Win 7 and 10). This little bug was pretty detrimental for us, since we are "enforcing" a Global Protect connection. The Global Protect service seemed like it was half-way running. Global Protect could not connect to the Portal/Gateway, which would then block ALL network traffic(because we are enforcing a Global Protect connection). I opened a ticket with support, but after a little while of troubleshooting, we just instructed our users to downgrade back to 4.0.x.
... View more
Contact Me
| Online Status |
Online
|
| Date Last Visited |
06-30-2022
03:24 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks