Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About Marc_T
About Marc_T
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
a week ago
10Posts
2Likes
2Solutions
Sep 16, 2020Last Visited
User
Activity
User
Profile
Latest posts by Marc_T
| Subject | Views | Posted |
|---|---|---|
| 2658 | 05-24-2020 11:03 PM | |
| 1268 | 02-23-2020 11:44 AM | |
| 672 | 05-16-2019 01:14 AM | |
| 677 | 04-05-2019 11:06 AM | |
| 2287 | 04-04-2019 11:21 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 03-26-2019 05:00 AM | |
| 1 | 04-04-2019 11:21 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 8 |
User Badges
Public Statistics
| Date Registered | 11-06-2017 03:02 AM |
| Date Last Visited | a week ago |
| Total Messages Posted | 13 |
| Total Likes Received | 2 |
05-24-2020
11:03 PM
Hi Joe, Great article, one thing I would add in to your deny category is the mobile "m.youtube.com" and embedded "youtube.com/embed/" options for viewing videos as these will allow users to bypass your rule base for YouTube. The added and modified url look something like: *.youtube.com/watch?v=
*.youtube.com/embed/ Cheers /M
... View more
02-23-2020
11:44 AM
Hi @nolansuess , Its been a while since I used this so I hope all the information I have still configured in my firewall is still valid. There are the certificates I had to install and then create a certificate profile from: You should be able to download any updated certs from here: https://support.jumpcloud.com/support/s/article/jumpcloud-radius-certificate-for-eap-ttls-client-deployments1-2019-08-21-10-36-47 Once I had all that configured I created the Radius profile as per usual Let me know if this helps /M
... View more
05-16-2019
01:14 AM
Hi All, I am busy testing login events for the API in Panorama to reditribute to the firewalls, when ever I execute the API call I get a 400 error returned: <response status="error" code="400">
<result>
<msg>You must specify a valid Device Group</msg>
</result>
</response> I have looked through all the documentation I can find but do not see the correct formating and xml entry for specifing the device group. I have the following: <uid-message>
<version>1.0</version>
<type>update</type>
<payload>
<login>
<entry name="testuidpanorama" ip="x.x.x.x" timeout="20">
</entry>
</login>
<device-group>
<entry name="dgname">
</entry>
</device-group>
</payload>
</uid-message> Any pointers ? Regards /M
... View more
04-05-2019
11:06 AM
Just a question regarding MFA for Globalprotect portal as well as the client. I am using Jumpcloud configured as my SAML iDP, when I use the native MFA for Duo captive portal returns the MFA prompt and send me a push message. If I configure the same iDP with MFA on the Globalprotect portal I do not see the MFA challenge page. Question: Is this as intended, as some of the documents I have read require you to use either the DAG or proxy from DUO but I was under the impression if I used SAML auth the native MFA integration would work. Many Thanks M
... View more
04-04-2019
11:21 AM
1 Kudo
Looks like I have managed to solve this issue, appears I had the wrond certificate chains loaded.
... View more
03-31-2019
03:21 AM
It would appear that PPPoE interface connections are not supported for the DDNS configuration. https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/networking/dynamic-dns-overview.html
... View more
03-26-2019
06:03 AM
I would be interested to know which DDNS provier you are using and the required certs, it would help with with a known workling config to ensure I have that setup correctly before I run down other rabbit holes. Many Thanks /M
... View more
03-26-2019
05:00 AM
1 Kudo
Hi, I have configured a RADIUS profile to use a "Directory as a service" provider (JumpCloud) for authentication, I have tested this with LDAP and everything seems to work as intended but when I configure the Radius profiles and test authentication via the cli I get the following response Failed EAPOL auth (-1).
Response for user: "bob" from RADIUS server: "self signed certificate in certificate chain; unknown CA" I have been through and installed the certificate chains for JumpCloud as well as the certificate they provide so I am not sure I understand exaclty what this certificate error is refering to. Any help will be appreciated. /M
... View more
- Tags:
- authentication
- radius
03-25-2019
03:40 AM
That seems to be the issue, I do not get an IP via DHCP from the interface directly when connecting to the CPE, I have to initiate a PPPOE connection which does not seem to pass the IP address back unless I have a configuration error somehwere. Can you share some of your configuration, I have tried both NO-IP as well as DuckDNS /M
... View more
03-23-2019
11:23 AM
Hi. Can anyone tell me if they have had any sucess using the DDNS feature in PAN OS v 9.0 when using a PPPoE connection. The only option I have is DHCP and this throws an error when commiting the rule base to the firewall, looking at the runtime stats there is no ip information. /M
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
a week ago
|
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
