About jesuscano

Is there any way to filter onedrive? by user account? we would like to filter the access. any idea? ... View more

Hi,   We have issues with a service using GP. To solve it we add the IP Palo GP tunnel in the PanGP adapter gateway in local machine. Why this is happening? is there any way to configure this pangp gateway from palo alto when user connects in GP?  ... View more

Hi,   We are having any issue wih globalprotect and several feaures of windows (office store, images word...). we realised that if we configure de default gateway made by hand in PAnGP interfaces, its working fine. Why is this happening? Is there any way to add atumacticallyany default gateway in PAnGP interface?   For Windows store we found this link: https://support.microsoft.com/en-us/help/4537233/microsoft-store-not-open-after-domain-joined-computer-connects-vpn ... View more

Hi,   We are having a strange issue. We have GP for 12 users.  Users with MacOS launch a ssh session to a jumpbox. This ssh session is working fine but when user has inactivity the session goes down, and then try to launch a new ssh session but its not working. We see this: 1) This behavious is only happening with GlobalProtect and MacOS devices. 2) In the first session the ssh session is matching the correct policy but after inactivity the session is matching the implicit deny policy. 3) The userID is identifying the user all time, when its working and when not. so thats why we dont think is a userid issue. 4) if we create a policy after the userid rule with IP filter the issue is not happening.   So this issue can be related to several things: 1) any issue with MacOS or GP 2) any issue with userid (although the users are being identified ip/user all the time)   any idea?       ... View more

Hi,   We just check that the command:  show user group name 'cn=......' has this output:  user group xxxxx  does not exist or does not have members.  All config is OK.    If we run "show user group list", i can see al the groups, but filtering by one of them shows: user group xxxxx  does not exist or does not have members   show user ip-user-mapping all ---> OK show user user-ids match-user xxxx ---> OK     Why is not showing users in groups? ... View more

Hi,   we have to add SNMP profile traps config to cluster PA. This cluster is managed by panorama and have the most of the config done in panorama. So we are thinking to add this snmp traps new config directly in the FW, so it would any issue is we apply a commit in the fws for not using panorama? . we are afraid to overwrite panorama config ... View more

- Being in different versions of Panorama (9.0.4) and PaloAlto (8.1.13), is it possible to deploy GlobalProtect clients? It does not work and I wanted to confirm this information - Is it possible to publish the linux version in the global protect portal? In the panorama these versions appear but not in the nodes? ... View more

Hi,   We are SNMP monitoring the number of users connected by GlobalProtect Gateway. Sometimes we see how the graph goes to 0 and recover the value some minutes later. No issues were reported by users connected by SSL-VPN.  So we are investigating if this is a issue about SNMP, GP service, etc... Going to snmp.log we dont see anything about problems with snmp daemon.   At 10:30am aprox the issue happened       Going to system logs the only thing we see is about "ras initializating". So i dont know if this issue with the graph was caused about this event.     Why this rasmgr daemon is initializating? what this daemon does? is this a bug?  ... View more

Hi,   Is there any way to take a pcap in plain text about a VPN-SSL connection?     ... View more

Hi,   We have two GP gateways configured in our PA. We realised that the passive PA unit, we can see "remote users" connected. Why is this? It shouldnt be asumme all GP user sessions in the active unit?   On the another hand, what is the OID (SNMP) to get tha value total users connected per GW? is that possible? ... View more