This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About benslade
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About benslade
12-12-2022
5Posts
0Likes
0Solutions
Dec 12, 2022Last Visited
User
Activity
User
Profile
Latest posts by benslade
| Subject | Views | Posted |
|---|---|---|
| 1047 | 09-23-2021 03:42 AM | |
| 1837 | 09-22-2020 08:59 AM | |
| 202861 | 08-17-2018 04:44 AM | |
| 4527 | 07-18-2018 05:05 AM |
User Badges
Community Statistics
| Member Since | 05-17-2018 03:42 AM |
| Date Last Visited | 12-12-2022 07:23 AM |
| Posts | 5 |
09-23-2021
03:42 AM
Hi all We have a load of small branch offices that terminate at our azure Palo Alto gateway over an IPsec tunnel (via a Draytek router). This all works and allows printing & RDP to onprem services. We also have the Global Protect gateway on the same Palo Alto albeit on a separate subnet We are starting to pilot win10 devices with global protect. The branch offices have a separate wifi which is essentially a public wifi The setup is that they (intuned) Win10 device has 2 networks; when docked are hardwired into the IPsec router (so are connected to the LAN that is connected to Azure over IPsec tunnel), and when undocked are connected to the public wifi and Global Protect allows them to access 365/onprem resources What I'm unclear about is when the device is docked and therefore hardwired to the Draytek router so traffic flows over the IPsec tunnel and Global Protect is also connected - both methods have the same destination subnets incl. in their routing tables - device traffic flows through GP but; - is there an overhead with GP connecting through an IPsec tunnel? I imagine this will add to the latency at the very least I've tried configuring policy routing on the Draytek to force all traffic through the IPSec tunnel (so GP can be disabled when hardwired) but have struggled to set this up consistently across the various Draytek models that we have at the +70 sites, this would have allowed us to use the Palo for URL filtering etc Thanks in advance Ben
... View more
- Tags:
- globalprotect
- ipsec
09-22-2020
08:59 AM
I've been working on a similar problem and as we're in a hybrid Azure/O365 state, we've had to implement more infrastructure than simply authenticating AD users! To cut a long story short we've go this working using SAML authentication from our AzureAD and have a hybrid connector to sync on-prem AD with AAD If you've got GP on your VM working then it's pretty straight forward to configure SAML for SSO, following this article worked for us; https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/palo-alto-networks-globalprotect-tutorial good luck
... View more
08-17-2018
04:44 AM
Hi
Thanks for the update. Quick question, we're a public body based in the UK; do we need to use the o365-api-any-any.txt configuration? Microsoft have a datacenter based here now
Cheers
Ben
... View more
07-18-2018
05:05 AM
Hi Spetka
I had the same problem using the ESXi ISO and the ansible playbook, but all for Ubuni v.16.04. Th eonly way I could get this working was to use v14.04. Even once I Hardened the instance, installed updates, imported the o365 Minemeld config, created recommended security policies, changed passowrds (all working as expected) I logged in today and there was an advisary to upgrade to 16.04, so I took a snapshot and folowed the prompts and lo and behold, back to the same "No module named DataTime".
So, maybe not the best idea, but I'll keep this running on v.14.04
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
12-12-2022
07:23 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks