This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About mike406
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About mike406
05-24-2019
36Posts
0Likes
1Solution
May 24, 2019Last Visited
User
Activity
User
Profile
Latest posts by mike406
| Subject | Views | Posted |
|---|---|---|
| 5336 | 05-20-2019 02:42 PM | |
| 5355 | 05-20-2019 07:50 AM | |
| 4220 | 05-07-2019 10:16 AM | |
| 4459 | 05-06-2019 07:20 PM | |
| 4521 | 05-06-2019 03:29 PM | |
| 3461 | 04-05-2019 02:38 PM | |
| 3476 | 03-27-2019 07:59 AM | |
| 3494 | 03-26-2019 01:41 PM | |
| 1668 | 03-12-2019 02:44 PM | |
| 2397 | 03-01-2019 01:00 PM |
User Badges
Community Statistics
| Member Since | 12-19-2017 11:58 AM |
| Date Last Visited | 05-24-2019 11:24 AM |
| Posts | 36 |
05-20-2019
07:50 AM
I was looking at this today and it looks like this is still the case - I'm running 8.0 code. Syslog does not contain change information. Can anyone confirm? Just want to make sure before I change the default to custom.
... View more
05-06-2019
03:29 PM
I want to be able to grab full URLs when specific sites are visited e.g. github so I can see what app/repo is being hit. Right now all I get is the domain. How granular can URL monitoring be? Can I get a full URL from URL filtering or URL category hits? Can I trigger a packet capture when specific URLs are hit?
... View more
04-05-2019
02:38 PM
Couldn't get this working. The other end of the tunnel is on a LAN sitting behind gear I don't have access to so I can't configure or confirm NAT settings or port forwarding. Tried to get the device to initiate a connection, but it has limited configuration options and couldn't set an email address or other option for auth. Will have to figure out another way.
... View more
03-27-2019
07:59 AM
Right. I understand public/private address spaces. I also understand I will need NAT configured properly on the unknown router/firewall for this to work. What I don't know is what value to use for the peer IP address, and then for authentication I'm assuming psk and email address or something like that will do the trick. AFAIK this can be done, I just haven't done it before.
... View more
03-26-2019
01:41 PM
I need to create a VPN tunnel between my PA firewall with a regular external IP address and a remote non-PA peer that is behind some equipment (no details) and only has a local 172.17.x.x address. Is this possible? If it is possible, do I use the external IP of the remote site even though the VPN connection will not be with that IP address? I'm assuming the non-PA peer on the remote LAN will always need to initiate the connection, correct?
... View more
03-12-2019
02:44 PM
Resolved with help from tech support. Per support - when ALG is disabled it is done so for all ports (not just the listed 5060,5061), this was new information for me. My issue was there was a policy blocking the traffic, so my testing failed. Once a policy was created to allow traffic, the testing tool succeeded.
... View more
03-01-2019
01:00 PM
My point is that I shouldn't have to guess or infer what security profile is being hit, the system should tell me. I'll bring it up with my PA sales team and SE.
... View more
03-01-2019
10:38 AM
"So you can infer a particular security profile is being matched." I understand, but this is what I don't want to have to do. Too much jumping around in the console just to find it out. Monitor -> Policies -> Rule -> Group Profile -> Objects -> Security Profile Groups -> URL Filtering Profile -> URL Filtering Would be much easier if the information was displayed. Sending via syslog would help as well. Do I need to submit as a product enhancement or feature request?
... View more
03-01-2019
10:18 AM
I have SIP ALG disabled and it's working fine for the default 5060 port, but my provider also uses port 10060 and I need to disable SIP ALG for this port as well. How can I do this?
... View more
02-26-2019
08:38 AM
I am working on blocking a TLD using a URL filter. I have multiple URL Filtering Profiles. I have the TLD block working, but the lack of security profile information in the Monitor tab view and detail logs makes it difficult to troubleshoot. Is there a way to display what security profile(s) are being hit? I understand these are tied to the rule, but an option to display them in the Monitor tab and seeing them listed in the log details would help.
... View more
01-25-2019
12:29 PM
That doesn't show monitoring status...the tunnel may be up, but monitoring might be in a down state because of a changed IP address (for example).
... View more
01-25-2019
10:33 AM
Okay, I've got it figured out. I also see the tunnel-status-up and tunnel-status-down messages in the system logs. Are there any plans to add a GUI indicator for tunnel monitoring status?
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks