This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About travisj
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About travisj
06-13-2016
12Posts
4Likes
0Solutions
Jun 13, 2016Last Visited
User
Activity
User
Profile
Latest posts by travisj
| Subject | Views | Posted |
|---|---|---|
| 3664 | 06-06-2016 06:05 AM | |
| 3682 | 06-04-2016 10:08 AM | |
| 5550 | 12-31-2014 07:15 AM | |
| 3450 | 10-23-2014 07:25 AM | |
| 3450 | 10-23-2014 06:07 AM | |
| 3747 | 10-22-2014 11:36 AM | |
| 3794 | 10-22-2014 11:10 AM | |
| 4281 | 10-21-2014 07:54 AM | |
| 4281 | 10-21-2014 07:49 AM | |
| 4402 | 10-15-2014 02:14 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 Likes | 10-23-2014 06:07 AM | |
| 1 Like | 10-22-2014 11:36 AM | |
| 1 Like | 10-15-2014 02:14 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 2 Likes |
User Badges
Community Statistics
| Member Since | 10-15-2014 01:29 PM |
| Date Last Visited | 06-13-2016 11:18 AM |
| Posts | 12 |
| Total Likes Received | 4 |
06-06-2016
06:05 AM
Pankaj,
That's what I thought, but I tried moving the existing firewall to that setup, moved isp, and PA to switch on same vlan with access ports, and they wouldn't talk. Only had a brief downtime window last weekend to test so wasn't able to do much troubleshooting. This next weekend is the planned implementation for new pair so I'll try again, and have time to clear arp and track down any issues.
Thanks for the help everyone.
... View more
06-04-2016
10:08 AM
We are about to replace a single 2050 with an HA pair of 3050's. Having some trouble figuring out how to get the switch and Pa configured so I can share the single ISP connection with both firewalls.
Current setup has interface 1/3 as L3 with the WAN ip address
I was trying to minimize the changes to make (because 2050 is insanely slow to commit) so attempted using a new vlan 111 on our core switch, set it up on two ports in access mode (untag all) and tried moving the ISP router and the palo alto wan interface into the switch on those two ports.
Am I going to need to change the wan interface on the palo alto to have a tagged sub interface on vlan 111 and move the wan IP addresses to it? Hopefully I'm just missing something simple.
thanks,
... View more
12-31-2014
07:15 AM
I had some issues after a Java upgrade on my pc a while back but not quite the same. Have you tried the basics? Check from different browser, and restart management plane?
... View more
10-23-2014
07:25 AM
And I never could get the certificates working they way that's suggested, I ended up just doing a basic selfsigned cert and using it for GW and portal instead of trying to do a separate root and cert like the documentation suggests.
... View more
10-23-2014
06:07 AM
2 Kudos
http://digitalscepter.com/wp-content/uploads/2012/05/Palo-Alto-Networks-Global-Protect-A-DS-JumpStart-Guide.pdf that's the link I followed for setting mine up, I'm currently testing some of the options and stuff but it does a fairly good job of getting you up and running quickly. It's for an older version so some of the options in various steps are on different tabs and stuff but it's not to hard to find them.
... View more
10-22-2014
11:36 AM
1 Kudo
thanks. dreputi that's exactly what I needed, the issue I was facing was that I already had something on 443 of the interfaces IP address. I didn't even consider nat'ing different port to a loopback deal.
... View more
10-22-2014
11:10 AM
Let's say we have an external facing interface Ethernet1/3 with Ip address of 1.1.1.14/28. The upstream isp router is 1.1.1.1 all other addresses (1.1.1.2-1.1.1.14) are routed to the Palo Alto and in use for various web services, etc.. Per the documentation I can find it looks like you have to set the Global Protect gateway IP address to the address you have set on the interface. Is there a way to use one of the other addresses in the range we have assigned? e.g. 1.1.1.10 mdl: PA-2050 Pan-OS 6.0.4
... View more
Labels:
- Labels:
-
Configuration
-
Panorama
-
Troubleshooting
10-21-2014
07:49 AM
After researching last week I found out that the new variant uses TOR for Command and Control. I blocked TOR application using security rule and that seems to have stopped it from actually doing any encrypting on new infections. Only seen a couple since last Thursday so it looks like a new update to either PA or McAffee might be detecting and blocking the new variant now. jhartsook: the rule I used if interested is: from zone ANY to zone UNTRUST Application TOR Service ANY (make sure to change this off "default application" so that it will block on any port)
... View more
10-15-2014
02:14 PM
1 Kudo
Thank you for the responses. We have most of that in place, completely block Zips, A/v scanning, users can't download files. The new varient seems to be getting around the older threat signatures somehow. I'm still trying to figure out exactly where it entered at and not having much luck. Where would i find the botnet report mentioned? We have 2 pa2050's with a panorama server.
... View more
10-15-2014
01:34 PM
Starting to see Cryptowall 2.0 infections anyone heard any updates from PA on a threat update for this? based on my google search it's been in the wild for a week or so.
... View more
Labels:
- Labels:
-
Content-ID
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks