This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
About Dave_Fitzjarrell
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Dave_Fitzjarrell
09-27-2019
7Posts
1Like
1Solution
Sep 27, 2019Last Visited
User
Activity
User
Profile
Latest posts by Dave_Fitzjarrell
| Subject | Views | Posted |
|---|---|---|
| 10071 | 08-27-2019 09:19 AM | |
| 3656 | 07-25-2019 08:40 AM | |
| 1507 | 05-16-2019 01:57 PM | |
| 4177 | 04-06-2018 07:20 AM | |
| 1424 | 03-12-2018 01:29 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 03-09-2018 09:58 AM |
User Badges
Community Statistics
| Member Since | 03-08-2018 01:36 PM |
| Date Last Visited | 09-27-2019 10:26 AM |
| Posts | 7 |
| Total Likes Received | 1 |
08-27-2019
09:19 AM
Good link for setting ciphers. Remember do not include CBC in your config. https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-cli-quick-start/get-started-with-the-cli/refresh-ssh-keys-mgt-port-connection# For MAC's I used these: configure
set deviceconfig system ssh mac mgmt hmac-sha1
set deviceconfig system ssh mac mgmt hmac-sha2-256
set deviceconfig system ssh mac mgmt hmac-sha2-512
commit
... View more
- Tags:
- 8.1.x
07-25-2019
08:40 AM
That is valid however I would not recommend it. This is a global setting and could be a security risk. Here are some alternatives that I have used. 1. Use a valid cert 2. Use a SSC and add it to the key store on the server 3. Use the URI ansible module and set validate_certs=no I'm sure there are many others that could be used.
... View more
05-16-2019
01:57 PM
I want to watch the API requests. Is there a log for that? If so, where can I find it? Thanks!
... View more
04-06-2018
07:20 AM
I found out you have to use a valid certificate. Either accept the cert by manually updating the keystore or use a trusted CA. We had a wildcard cert and once that was applied the connections started working and I can manage the firewall with ansible.
... View more
03-12-2018
01:29 PM
Hi, One of our users complained that proxy settings in chrome where getting wiped out every time they connected to the VPN. After some research we determined this was affecting all Mac users. "No direct access to local network" is unchecked. Steps to repeat the issue: 1. Set advanced Network Proxies settings to use the Automatic Proxy Configuration on the Mac and give it a URL to a pac file. 2. Open Chrome and navigate to chrome://net-internals, select proxies from the left pane. Ensure the pac file is listed for proxies. 3. Enable GlobalProtect. 4. Watch Chrome switch to show "Use Direct connections." as soon as the VPN is connected. Is this normal and expected behavior on a Mac? Does anyone know why Windows is unaffected? I want to submit a bug report, but maybe its a feature enhancement, I'm not really sure. Any asistance is appreciated. Thank you!
... View more
- Tags:
- global protect
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-27-2019
10:26 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks