This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Jamesy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Jamesy
05-18-2023
15Posts
0Likes
2Solutions
May 18, 2023Last Visited
User
Activity
User
Profile
Latest posts by Jamesy
| Subject | Views | Posted |
|---|---|---|
| 2380 | 03-04-2022 07:02 AM | |
| 2429 | 03-04-2022 01:24 AM | |
| 2536 | 03-03-2022 09:13 AM | |
| 2219 | 04-01-2021 01:31 AM | |
| 4051 | 01-05-2021 01:25 AM | |
| 4128 | 01-04-2021 06:42 AM | |
| 2670 | 09-16-2020 09:17 AM | |
| 2709 | 06-26-2020 10:03 AM | |
| 2747 | 06-26-2020 09:37 AM | |
| 3489 | 01-31-2020 09:58 AM |
User Badges
Community Statistics
| Member Since | 11-27-2017 02:12 AM |
| Date Last Visited | 05-18-2023 11:04 AM |
| Posts | 15 |
03-04-2022
07:02 AM
Hi Tom, I had tried this variation of the command, but it was the same. I did manage to get it working. I ran a show command to verify what was being returned, and I noticed that the computer name was in upper case, so I added that, and it worked. The error message, despite mentioning invalid username, has actually nothing to do with the username. I verified by running again with one letter in lower case as well as a variation with the domain parameter removed, and it failed each time with the invalid username error. So it seems, the gateway name (including the -N), the username (mine was in email format user.name@domain.com) and the computer name are all mandatory case-sensitive params. I don't think the order of these params is important. Thanks for the help.
... View more
03-04-2022
01:24 AM
Hi Tom, Thanks for the reply. I found this article yesterday evening and tried it, but the result is the same, I'm afraid. No matter what combination of parameters and no matter the order I place them in, I get the same message. My primary usernames are listed as firstname.surname@domain.com which I have tried also. My new syntax including the domain is below and the error message I get is: Remote-Gateway-N domain.com joe.bloggs Invalid user name <request><global-protect-gateway><client-logout><domain>domain.com</domain><gateway>Remote-Gateway-N</gateway><user>joe.bloggs</user></client-logout></global-protect-gateway></request>
... View more
03-03-2022
09:13 AM
I am trying to disconnect a global protect user on our gateway via the API. I have tested using the API browser and via a CURL command, but no matter what syntax or variation of the username I use, I get the message Remote-VPN-Gateway-N joe.bloggs Invalid user name. Below is the syntax I am using with the XML API based on the documentation. Am I missing something fundamental, or have I hit a bug in the API? The PANOS version I am running is 9.1.12-h3. <request>
<global-protect-gateway>
<client-logout>
<gateway>Remote-VPN-gateway-N</gateway>
<user>joe.bloggs</user>
<reason>force-logout</reason>
</client-logout>
</global-protect-gateway>
</request>
... View more
04-01-2021
01:31 AM
Hi Chacko, Thanks for responding to this post. I had actually determined the cause of the issue to be a USB-C RJ45 network adapter I was using to connect the devices and not the firewall at all. I fotgot to come on here and update the post. Cheers, Jamesy
... View more
01-05-2021
01:25 AM
@OtakarKlier , @BPry Thanks you both very much for your replies. I will get a ticket opened with support.
... View more
01-04-2021
06:42 AM
Hi there, We have several older model devices that we no longer use in production so I wanted to remove them from the customer portal. I don't see an obvious way to do this so I wanted to put the question out there. How do I/ can I even, remove devices from the customer portal?
... View more
09-16-2020
09:17 AM
I am working on testing improvements to our rule sets by breaking the rules into app groups as opposed to just allow all. Pretty much everything is working fine except for OSD deployment via SCCM. In particular the O365 click to run installer. The deployment process runs fine up to the point of installing office where it hangs for a very long time. The image completes but the app has not installed. I see a lot of aged-out connections from the PC to the SCCM server which is located on another site. When I add a test wide open rule of allow all/ any/ any, etc it works fine. App-id is working in that it logs it as ms-sms and is hitting the right server. I have tried changing the policy to service any and also removing the security profiles but it still fails. Wireshark on the PA and the SCCM box show me 3 way handshakes, a few initial packets over HTTP and then an rst from the PC as SCCM has not responded. I learned today that with SCCM and CTR installers that there is potentially an initial connection, a download of an XML config file and then a connection to the web to download the latest version. Which would explain the behaviour that I am seeing. This would mean secondary sessions and potentially having to leave an any/any/any rule in place which defeats the purpose of the rule sets. Has anyone else had to deal with this and found a solution?
... View more
06-26-2020
10:03 AM
Hi Himani, I have gone through the best practice docs and used these to build the profiles and policies. I would like to be able to test these before applying them in production. I want to have a checklist to ensure that they profiles don't a) cause any blockages to traffic and b) are blocking malicious/ unsanctioned traffic as intended. Thanks, Jamesy
... View more
06-26-2020
09:37 AM
I am currently building out more granular policies that have application groups applied as well as security profiles for AV, malware, vulnerability and URL filtering. I will be applying these to a test firewall and would like to build out a test plan to ensure they are working as expected. I just wanted to run this by the community to see if perhaps there were any recommendations on testing the AV, malware and vulnerability side of things?
... View more
01-31-2020
09:58 AM
Hi there, I am testing Radius configuration for our admin accounts using windows NPS over PEAP-MSCHAPv2. I have our local CA cert in the cert profile and configured all the required params like vendor specifi attributes,etc. When I run a test authentication profile and add my domain creds I get the message ''Response for user: "<user name>" from RADIUS server: "unable to get local issuer certificate; unknown CA" Authentication failed against RADIUS server at <server IP>:1812 for user "<user name>. Has anyone else seen this?
... View more
10-24-2018
12:18 PM
Thanks everyone for the input. It’s pretty clear at this point that there is no way to do it. I will mark this one as answered.
... View more
10-24-2018
02:07 AM
Hey Luke, Thanks for this. I am aware of this option and I agree it does seem pretty easy. This has been requested from the top, so I have to make sure I confirm there is no option for a command line that would facilitate a desktop shortcut to quickly diconnect when required. I haven't seemn anything n teh docs and none while testing in teh CLI on a Windows PC. Am I correct in saying at this point that one does not exist? Cheers, Jamesy
... View more
10-23-2018
11:11 AM
Hi Mick, Thanks for for the response. This is an option and one that was presented to management who requested this, but I guess they want to make it even simpler by having an icon that users can double click.
... View more
10-23-2018
08:11 AM
I want to create a script or some other option if it is available that will present an icon on the users desk so that they can quickly disable/ enable the GP client without the reason prompt. I had a quick look but I don't see any CLI oprtions available tha I can use in a script. Is this possible?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-18-2023
11:04 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks