Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About SamerKiwan
About SamerKiwan
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
a week ago
25Posts
0Likes
0Solutions
Sep 09, 2020Last Visited
User
Activity
User
Profile
Latest posts by SamerKiwan
| Subject | Views | Posted |
|---|---|---|
| 634 | 05-08-2019 04:09 AM | |
| 652 | 05-07-2019 06:41 AM | |
| 1283 | 03-08-2019 03:48 AM | |
| 1284 | 03-08-2019 03:47 AM | |
| 1285 | 03-08-2019 03:45 AM |
User Badges
Public Statistics
| Date Registered | 05-28-2018 11:40 PM |
| Date Last Visited | a week ago |
| Total Messages Posted | 25 |
05-07-2019
06:41 AM
Hi Experts, I configured global protect SSL VPN all worked as expected but i am facing an issue, GP users are not showing up on my monitor tab, i know that its a routing issue i did the below routing and created security policy to allow all GP traffic to have full access but still i can't access any internal resource in my network and not able to view SSL VPN users traffic. Interface1/1 is the public interface where the Tunnel that is used for GP is configured. Appreciate your help.
... View more
- Tags:
- globalprotect
- ssl vpn
03-08-2019
03:48 AM
No Brandon i am not able to reach the website from external, i can only from internal network.
... View more
03-08-2019
03:47 AM
I tried all kinds of NAT policies and i tired the one you mentioned, but for some reason still no logs, maybe the issue is from public IP itself ? should i contact ISP to check with him?
... View more
03-08-2019
03:45 AM
Please find the NAT policy attached, and all my security policies are having logging enabled.
... View more
03-08-2019
03:33 AM
Dears, This is to inform that this issue has been finally solved ! there was a static ARP on the core firewall interface. We put dynamic and ll worked properly. Thank you all.
... View more
03-06-2019
12:21 PM
Hi Experts, I am trying to publish a website, the webserver is behnid my Palo alto, i created NAT rule from public IP to be natted to the internal webserver IP address. What is starnge here is that i am not able to see my traffic when trying to reach the website from external. I was testing from my mobile so i put in Montior traffic tab source is my mobile public IP but couldnt find any logs:s. Any suggestions? Thanks,
... View more
03-05-2019
08:51 AM
Yes, please i would appreciate if you can help with this.. but i didn't know how to inbox your from here -_-
... View more
03-05-2019
08:36 AM
Yes on both devices its True. Palo Alto Copper interfaces are connecting to the A10 device (using SFPs Fiber to Copper).
... View more
03-04-2019
12:11 PM
For sure no i don't keep such setting, but i did that for testing purpose it was "True" i put it "False" to check if issue will get resolved but it didn't. Is it possible that A10 device makes such issue? maybe its SFPs are not compatible with the new PA ethernet ports?
... View more
03-04-2019
12:39 AM
@ BPry I checked configuration syntax its exactly the same.. :S any other suggestions ?
... View more
03-04-2019
12:23 AM
@ rmfalconer what is the setting exact name of the asymetric routing ? below is my session settings Session setup TCP - reject non-SYN first packet: False Hardware session offloading: True Hardware UDP session offloading: True IPv6 firewalling: True Strict TCP/IP checksum: True Strict TCP RST sequence: True Reject TCP small initial window: False ICMP Unreachable Packet Rate: 200 pps
... View more
02-28-2019
10:24 AM
1) i am using ports 1-12 2) I didnt compare through config audit i will do so 3)i see resets, but all actions are allowed..
... View more
02-28-2019
10:09 AM
Okay, Thank you very much for your responses. I will check and update you.
... View more
02-28-2019
09:33 AM
Ah okay, but this global setting shouldn't be included in the config file that i exported from the old PA3050 ?
... View more
02-28-2019
09:26 AM
Ah i didn't, but i will check this and get back to you. One more thing, would this affect the other zones as well ? i mean would this affect the DMZ zone ? or only this would affect internet connectivity.?
... View more
02-28-2019
09:25 AM
Ah i didn't, but i will check this and get back to you. One more thing, would this affect the other zones as well ? i mean would this affect the DMZ zone ? or only this would affect internet connectivity.?
... View more
02-28-2019
09:09 AM
You mean its a setting in the Zone protection? I created a zone protection.. -->Packet based attack protection-->"reject non SYN TCP" i put it to "NO" and the Asymmetric Path to "Bypass" Is that correct?
... View more
02-28-2019
08:50 AM
Its showing the correct ARP, PA MAC address matching the correct IP. On the other hand, why would be an asymetric routing if nothing changed in the network except changing the device.? that's the point here.. whenever i switch cable to the old device all work properly.
... View more
02-28-2019
08:38 AM
NO, i checked through all dvices, no single drop in any.. plus i cleared ARP in PA and in neighbor devices and still not working, i noticed that i can't ping from PA interface to the other end which is a switch. i have no idea why would this happen...
... View more
02-28-2019
02:09 AM
Dear experts, I am moving from PA3050 to PA3220. I did export the current configurations from the old PA3050 and imported to the new PA3220, i committed successfully, but when i migrate cables from old device to the new one i get random issues! like some zones are not reachable, like i have ping to internet and telnet and traceroute but i can't browse!, like i can't ping some destinations. WEIRD! its the SAME configuration and OS versions(8.1.1) are the same on both devices plus, i did download and install latest content version on both devices before moving the exporting the config file.xml. NOTE: when i move to old PA3050 all work properly! One more thing, we have A10 (SSL Interception) connected to PA from external side and StormShield (AS core firewall). REALLY WOULD APPRECIATE YOUR HELP.
... View more
02-28-2019
02:07 AM
Dear experts, I am moving from PA3050 to PA3220. I did export the current configurations from the old PA3050 and imported to the new PA3220, i committed successfully, but when i migrate cables from old device to the new one i get random issue! like some zones are not reachable, like i have ping to internet and telnet and traceroute but i can't browse!, like i can't ping some destinations. WEIRD! its the SAME configuration and OS versions are the same on both devices plus, i did download and install latest content version on both devices before moving the exporting the config file.xml. NOTE: when i move to old PA3050 all work properly! One more thing, we have A10 (SSL Interception) connected to PA from external side and StormShield (AS core firewall). REALLY WOULD APPRECIATE YOUR HELP.
... View more
09-15-2018
02:48 AM
Thank you Bpry, i appreciate your help. Actually i will try to either get switches on both sides or establish another separate link.
... View more
09-07-2018
09:00 AM
Dear All, Can anyone please help regarding an HA configuration between 2 different data centers far in distance from each other, and connected to each other using a Fiber link. is that configuration possible? how to do this over only one link between the 2 locations? Thanks,
... View more
05-30-2018
02:58 AM
Hi All, I am installing PPPOE link on my Palo Alto, its not wroking! i am using the correct user name and password. moreover i tried this on my laptop and got connected to internet. but in PA i checked system logs its showing that couldn't connect to PPPOE with reason "no PPPOE offer received" can anybody help please? Thanks,
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
