Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About Gareth.Doyle
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About Gareth.Doyle
yesterday
48Posts
6Likes
5Solutions
Jun 16, 2021Last Visited
User
Activity
User
Profile
Latest posts by Gareth.Doyle
| Subject | Views | Posted |
|---|---|---|
| 72 | yesterday | |
| 110 | yesterday | |
| 245 | Friday | |
| 337 | Friday | |
| 389 | Friday |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | Friday | |
| 1 Like | 10-23-2019 11:28 AM | |
| 1 Like | 01-22-2018 06:07 PM | |
| 1 Like | 01-09-2019 06:54 AM | |
| 2 Likes | 10-25-2019 11:38 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 01-05-2018 02:57 PM |
| Date Last Visited | yesterday |
| Posts | 48 |
| Total Likes Received | 6 |
yesterday
Yeah, but then I have to bypass decryption on AWS, Azure, and GCP IP blocks... That seems entirely unreasonable.
... View more
yesterday
My organization is in the process of moving from one VPN solution to GlobalProtect. We are seeing several applications being unable to run certain features, or run successfully at all, and the error logs appear similar to this (I say similar because this specific message is from one application, others may vary, but all are similar): sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target A second one: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target Our workstation team has tried implementing our organization's root and intermediary certificates into a specific Java cert store according to some information they found online, but the error persists. The only change was moving to GlobalProtect. I have found that bypassing our decryption policies on the Palo Alto fixes this issue, but bypassing decryption for things that often reach out to cloud resources (thereby bypassing decryption to huge chunks of the internet) is not fully acceptable. Has anyone experienced anything like this and/or have any suggestions? Thanks!
... View more
Friday
No, that does not disable split-tunneling, that just enabled direct LAN access. For instance, if you have that box checked, you cannot reach local printers on the same subnet.
... View more
Friday
Yes, there is an option to enable/disable local network access when you are connected to the VPN. If you are not allowed LAN access then split-tunnel routes won't matter.
... View more
Friday
Is there a way to have a Dynamic Service Group, similar to Dynamic Address Groups? Thanks!
... View more
2 weeks ago
@BPry that hasn't been my experience with it unfortunately. It seems very limited.
... View more
2 weeks ago
Can anyone explain what the impact to the firewall of running this command would be: delete license key <logging_service_key> Would it prevent it from working suddenly, would it just be for the logging service and then it would have to refetch the key? Thanks!
... View more
3 weeks ago
From what I can tell, CDLs syntax is extremely limited compared to that of Panorama. Does anyone think differently? Any tips/tricks you can share for more in depth queries? For example: excluding multiple IP ranges; limiting the search one user, but including multiple apps/destinations with an OR. Essentially anything you would use parenthesis for in Panorama seem like you cannot do in CDL.
... View more
05-14-2021
03:44 AM
@SteveCantwell , we have decryption policies created. I'm trying to see their usage (e.g. what traffic is hitting them, if traffic is hitting them, how often traffic is hitting them). Thanks.
... View more
05-11-2021
05:47 AM
Does anyone know if there is a way to see what traffic, or if traffic, is hitting decryption policies for Prisma traffic? I have some policies I would like to clean up if I can, but unlike security policies, I can't seem to filter traffic that may be utilizing decryption policies. Thanks.
... View more
12-03-2020
03:37 PM
In case anyone needs it in the future: show chassis inventory
... View more
12-03-2020
02:13 PM
Is there somewhere in the GUI (or more likely a CLI command) that will show me the hardware type of the cards I have installed on my 7080? Specifically, I am trying to see if I have an SMC or SMC-B. Thanks.
... View more
12-02-2020
04:44 PM
I agree, but I also understand why it is viewed as a policy. That said, I was hoping there was a way to force sync without changing settings on the active Panorama, I would rather not have to wait until the next time this is pulled and syncs. I suspect that downloads were bad on the passive device for some reason as when I deleted and manually re-downloaded the anti-virus it installed without issue. Thanks.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
yesterday
|
Likes From
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
