About jesuscano

Hello all,   I have a problem that has no sense for me.. A customer of us has problems with speed when they used his mobile phone as Personal Hotspot, all his employees uses same mobile phone model & ISP, and also same GlobalProtect version (5.2.2).   When they're conencted throught their mobile phone & GP they have 35.4 Mb/s download but 0.01/Mb upload. On the other hand, if they not use GP they have 38.5 Mb/s download & 22.6/Mb upload. If they're connected thorught another ISP (via wifi) they have 27.6 Mb/s download and 4.32/Mb upload (without GP) and 29.4 Mb/s download and 2.35/Mb upload (with GP). It makes sense for you? I also try to modify MTU on GP, same problem. Could it be this problem related with ISP? Or it's something that you can configure on GP? There's no QoS configured. Thanks in advance, Regards! ... View more

Hi,   Customer upgrade Adobe to  versión 21.001.20135 and Global Protect stopped working. Issue is th esame like this: https://community.adobe.com/t5/acrobat/adobe-acrobat-reader-21-001-20135-preventing-users-to-connect-to-global-protect/td-p/11823885?profile.language=es   Do you know if there is anything to do in Global Protect for this? ... View more

We can not understand at all how Wildfire works.   We realised that WF detects files that have been downloaded and categorized as malware can continue to be downloaded for a long time, this behavior is not the expected, which indicates that once it is categorized as malware, the signatures are automatically updated in a short time and the next time it can no longer be downloaded. We also do not understand how a file (being malicious) can be downloaded the first time.   Why WF detects a malware and this file can be still downloaded? why WF permits the first file to be downloaded to get veredict? any document about how WF analysis works to solve this doubts? thank ... View more

Hi,   We have this fqdn object created:  2021-01-08 12:26:14.872 +0100 dnscfgmod: Fqdn SIEMENS OWNCLOUD SERVER/cco.siemens.com could not be resolved   If i run a ping from MGMT A interface is resolving: ping host cco.siemens.com PING cco.siemens.com (212.231.11.154) 56(84) bytes of data.   The DNS is OK, reachable, and resolving.   If i go to the web and clik solve in the object is also resolving:     But in FQDN list is not resolving so the rule is not applying.   request system fqdn show: cco.siemens.com (Objectname SIEMENS SERVER): Not resolved   WHy is happening this? any file to check deep tshooting?   ... View more

Hi,   We would like to run a script for the users when GP VPN goes UP. This script is for mapping network drives in theclients.   Is possible to do that? any link with info?  ... View more

Hi,   We are having issues with cisco jabber using Global Protect.Clients reported that the jabber status (online/offline) is wrong so they have issue calling. The rule VPN-SSL zone to inside is any/any, so no restriction. Looking in pcap we can not see any drop. I have no evidence in the FW but the common point is the Palo with VPN GP. Have you reported any issue with jabber using GP???? ... View more

Hello,   i am seeing this counter increasing and I am not sure if i should be worried:   > show counter global filter delta yes Global counters: Elapsed time since last sampling: 0.15 seconds name value rate severity category aspect description -------------------------------------------------------------------------------- pkt_recv 289 19266 info packet pktproc Packets received pkt_recv_zero 216 14400 info packet pktproc Packets received from QoS 0 pkt_sent 371 24733 info  packet pktproc Packets transmitted pkt_alloc 200 13333 info packet resource Packets allocated pkt_inconsist 292 19466 info packet pktproc Packet buffer pointer inconsistent     can anyone tell me what means this counter? ... View more

Hello,    After upgrading to 8.1.X > 9.0.X > 9.1.x. we found that some ldap users do not check per user policies, only for ip politicies.     The firewall has no user-id configured, only tree server ldap.   we check that the firewall recognizes the Ldap tree.    Is there any issue of incompatibility with the version?   Thanks.  ... View more

Hi,   We would like to know if its possible to configure Palo Alto GP gateway in order to permit connect using Cisco anyconnect client? what it would be the config to do that? ... View more