This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Gene_Barden
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Gene_Barden
03-22-2022
47Posts
0Likes
1Solution
Mar 22, 2022Last Visited
User
Activity
User
Profile
Latest posts by Gene_Barden
| Subject | Views | Posted |
|---|---|---|
| 2393 | 10-01-2021 06:25 AM | |
| 1591 | 08-25-2021 03:00 PM | |
| 2403 | 03-09-2021 08:53 AM | |
| 2441 | 03-09-2021 06:42 AM | |
| 2487 | 03-09-2021 05:23 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes |
User Badges
Community Statistics
| Member Since | 06-06-2018 08:55 AM |
| Date Last Visited | 03-22-2022 03:35 PM |
| Posts | 47 |
10-01-2021
06:25 AM
We have GlobalProtect Pre-Logon working with machine certificates however once the user logs into their laptop they are also prompted with thier User Certificate each time. There internal CA does issue machine and user certificates. Is there a way to disallow the User certificate prompt? Do we need to also use User certificates along with machine certficicates? Verion is 10.0.7 and GP 5.2.7
... View more
08-25-2021
03:00 PM
Anyone have any luck with getting GlobalProtect Pre-Logon going wih Prisma Access? Currently testing with an internal CA with bor=th the Root and Intermediate installed in the Mobile User Templete. Client tries to connect and immediately receive an error "Client cert not present". We have tried a self-signed cert and get the same error message.
... View more
03-09-2021
08:53 AM
Thanks! Don't know why I said arp table for layer 2..What would explain the need for HA-2 to require an IP transport with an IP address. I did one with OTV and did not require IP transport. I am not a VXLAN expert but would assume if it is true layer 2 I could use transport ethernet.
... View more
03-09-2021
06:42 AM
Is there a way to determine if HA-3 is actually layer 2 prior to cutover? I assume I can look at the arp tablein the Palo and the switches.
... View more
03-09-2021
05:23 AM
Have an Active/Active deployment, single firewall at each DC with EVPN/VXLAN through Juniper cores. Can we have the HA-3 link go through the core switches? We are using daa plane interfaces for HA-2, HA-2B, and HA-3. We have the vlans stretched across to the other data center for the HA-2 and HA-3 links and jumbo frames enabled. I need to verify if the HA-3 link can operate properly through EVPN/VXLAN or do we need a direct connection. I ask because normally for HA-2 I would just use ethernet as the trasnport but had to use IP even though the vlans are stretched. Also, for session setup I normally use IP Modulo but PAN config guide states First Packet is recommended. Thanks!
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-22-2022
03:35 PM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks