Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About cityofkingsland
About cityofkingsland
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
08-31-2017
24Posts
1Like
1Solution
Aug 31, 2017Last Visited
User
Activity
User
Profile
Latest posts by cityofkingsland
| Subject | Views | Posted |
|---|---|---|
| 795 | 08-09-2011 12:53 PM | |
| 5847 | 05-12-2011 12:30 PM | |
| 5847 | 05-12-2011 11:50 AM | |
| 1056 | 04-14-2011 04:41 AM | |
| 426 | 04-06-2011 10:58 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 05-12-2011 12:30 PM |
User Badges
Public Statistics
| Date Registered | 12-15-2010 04:20 AM |
| Date Last Visited | 08-31-2017 04:41 PM |
| Total Messages Posted | 24 |
| Total Likes Received | 1 |
08-09-2011
12:53 PM
Is there an easier way than to force a user to change their settings to control the safe search option? Can I enable safesearch inline through the PA? Looked through a few of the docs available, but it seems it should be a simple rule that enables safesearch without user interaction or being presented a block page.
... View more
- Tags:
- url_filtering
05-12-2011
12:30 PM
1 Kudo
failover is a great way to go! cost savings are great compared to paying for another full service line. to do this you will go to your virtual router, enter in a 0.0.0.0/0 route out to your failover line with a higher administrative distance than that of your existing link (which should be already set to be 1) This tells the router use the primary link until it it no longer reachable, after that link goes down use backup link. Good Luck, let me know if you need anymore help configuing this!
... View more
05-12-2011
11:50 AM
Will you be setup on BGP multihoming or will you just have two 0.0.0.0/0 routes?
... View more
04-14-2011
04:41 AM
This has been fixed in 4.0.2. I just updated and all my threats now have correct IDs and information.
... View more
04-06-2011
10:58 AM
I think he posted a discussion when he watned to post a document.
... View more
04-06-2011
10:45 AM
We disabled IPsec on our PA500. Tried reconnecting the SSL Client but still getting the same error. I can see the clients attempting to connect but are never assigned an IP address from my SSL pool; but other clients are getting IP addresses. Is it possible that 443 is used for authentication and another port is used for data ? Is there a debug command i can use to view authentications and data coming into the firewall?
... View more
04-04-2011
12:09 PM
SOLUTION :When setting up the Agent service on the domain controller you will want to have the settings under the "Recovery" tab to be "Restart the Service" for First/Second/Subsequent failures and to have the restart service timer at 1 minute. This works for Server 2003 R2 environments.
... View more
03-31-2011
11:46 AM
show user ip-user-mapping ip 10.7.1.60 IP address: 10.7.1.60 User: unknown Ident. By: Unknown Idle Timeout: 651s Max. TTL: 1551s Groups that user belong to (used in policy) i have changed the settings on the agent to disable the NetBIOS/WMI checking. Have reset all other values to defaults. What should i try next? Thanks for you help!
... View more
03-31-2011
04:43 AM
Eugene - Have you configured the outside addresses for your nat tables yet? I think you also might have the subnetting or the addresses wrong. For L3 connections with a /32 this is used for Point-to-point links, if you were to have a single link from the ISP. If this setup is currently working double check your subnets used. /32 indicates PA-2020 (100.100.100.197/32) --> ISP (100.100.100.198/32) We'll work on getting basic connectivity now: GOTO: Objects tab and make sure you have the proper outside address in the ADDRESS menu. Make sure you are using the IP Netmask configuration with just a single IP address per config. Policies > NAT -- make sure you have a rule saying trust to untrust you are doing source address translation. You will be doing Port and IP address translation and using the OUTSIDE address you just configured. Under the Network tab > Interfaces do you have zones set, virtual router (internal and external interfaces need to be on the same router). Both untagged and both have a L3 interface type. Under Network > Virtual Routers -- check your vitual router has a default route to the outside world. Destination 0.0.0.0/0 Net hop type: IP Next hop value: GATEWAY-PROVIDED BY YOUR ISP (100.100.100.100) FOR doing the NAT to your web server at 10.1.1.2/32 you will do the following: Object > ADDRESS - add your external address used for your server (100.100.100.197?) Policies > NAT -- make a new rule. Source zone: untrust Destination zone: trust Destination Address: choose the new 100.100.100.197? address you just created service: http/https/whatever service you are using. destination translation: translation address 10.1.1.2 translated port - can leave blank or use 80/443 if you want. commit and be awesome. let us know if any of this was helpful.
... View more
03-30-2011
05:50 AM
Also you could try disabling NetBIOS lookups on the Agent. Check the box to disable Netbios, save, OK and then restart the PanAgent service.
... View more
03-29-2011
06:03 AM
I have the same 2 domain setup and use logon scripts that run as DOMAIN\Administrator to map drives and such, but doesn't affect USER-IDs. How did you come to the conclusion that its based on your mapped drives? Can you isolate the user with its own rules and then re-map a drive and have the same outcome? A lot of times with our USER-ID agents the agents time-out and all users get tossed into my "ALL OTHERS" rule, which causes some conflict. Changing the time-out time on the agent and a simple reboot can fix this. Are you using 4.0.1? Seems this problem has occurred more often in 4.0.1 for our organization.
... View more
03-23-2011
11:33 AM
Also high priority, the people using this VPN can't do their reports unless they have the VPN connection.
... View more
03-23-2011
07:26 AM
We have a few officers that connect from a remote location with a firewall of its own. They are all using the SSL VPN client to connect back to home. I can pull up the https://external-ip and login, but when the connection starts up i get a Disconnected; unable to connect to remote client. I need to know what ports the SSL VPN client uses to connect back to our firewall so I can tell the IT guy what ports to open. Thanks in advance!
... View more
03-18-2011
04:19 AM
I am also seeing this a lot more often since the 4.0.1 upgrade. I think the way PA determines if its a virus or not has changed since 3.x. Not so much based on defenitions, based more on an internet database of file extensions and other virus like characteristcs. Hope someone knows whats causing them.
... View more
03-16-2011
10:35 AM
IOS : 4.0.1 User ID Agent Version: 3.1.2 We have RULE1 set for USERS - A, B, and C. They have an AV, Anti-Spyware, and Vulnerability protection. RULE2 is for ANY other users on the network, which has its own AV, Spyware, Vulnerability profiles as well as a URL Filter. Users associated with RULE1 will randomly be applied to a URL filter, when they should not be. After a user reboots their computer the problem is fixed, but the problem will happen once again. I have also tried using Source IP address as well as USERNAME on RULE1 to prevent this, but unfortunitally we still have problems. Any ideas on other things to try?
... View more
02-10-2011
10:01 AM
Would the edit be under Policies > Security > Options (of the specified rule) > Under "Log Setting" uncheck both boxes?
... View more
02-10-2011
09:52 AM
Is it possible through rules to disable logging for specific users? We have a child protection devision in our police dept that uses peer-to-peer and bittorrent -- which makes our threat level sky rocket. Is there a way to prevent that traffic for those specific users from showing in ACC?
... View more
Labels:
01-06-2011
05:52 AM
Can I setup a packet-capture for sites that are either on my block list or set to be 'Continue'? We dont want packet-captures of all blocked traffic, but a specific continue page would be nice to have. Any suggestions?
... View more
12-21-2010
04:17 AM
The reason for the effort is to have admin users using the same password they use for the SSL-VPN as they do for logging into the equipment. No reason to have another 3 passwords for one new piece of equipment. Also I have attempted to do the administrators and add the auth profile for the local DB with the selected users in the specified auth profile.
... View more
12-20-2010
11:58 AM
User 'user' failed authentication. Reason: Authentication profile not found for the user. When setting up an administrator I get the above error message. The authentication profile has the user on the allow list and is also applied to a new member of the administrators group. Process: Made a local DB user. Created new authentication profile: Gave Profile name: Device Placed new localDB user into 'Allow list' Changed Failed attempts to 4 Changed Lockout Time to 1 Authentication: Local DB Under Device > Administrators Click New: Name: Local Authentication Profile: Device Role: Dynamic: Superuser Commit. When I attempt to log back in I get an error message that the user/password is incorrect. Then when I log back as admin I can see the above error. Thank you in advance for any help.
... View more
12-20-2010
08:20 AM
After testing out PA we wanted to remove all testing logs and data that was produced during the labbing phase. What would be the CLI command to delete all the data without having to do a private-data-reset? Want to keep all the current settings, but remove data from ACC and other logs so we can start fresh.
... View more
12-16-2010
06:35 AM
yeah shortly after posting I found the L3 setup video and saw what I was doing wrong. GAH. I hate how you have to make a fool of yourself in order to find the problem. Thanks for the help!
... View more
12-16-2010
05:52 AM
We use HP 3500yl switches as our routing for internal data. They have a default router pointing to 10.1.1.2/24 (PA-500). The HPs work by putting the interface in a Vlan then putting it as untagged and applying the ip to the vlan-interface. so: HPswitch(10.1.1.1/24) in vlan 101 ---> connect ---> PA500 E1/2 (10.1.1.2/24) I am unable to ping 10.1.1.2. Both sides say they are up/up/1000FD. Any ideas or suggestions to try?
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
