About welly_59

pkumar2 · ‎06-10-2020

https://support.microsoft.com/en-us/help/4537233/microsoft-store-not-open-after-domain-joined-computer-connects-vpn

FarzanaMustafa · ‎12-09-2019

Hello @welly_59 We had similar problem earlier and PA TAC assisted us in resolving the issue. Below are the things to check/configure: --FQDN configured properly --Try a portal config refresh: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClF1CAK --Try latest GP version

dpeterson4 · ‎05-30-2019

The path to the registry setting is here. Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\Settings The key value is connect-method The value data is either on-demand, pre-logon, or user-logon

MickBall · ‎10-19-2018

i do not use pre logon but we do have device certs in the machine personal store via Group Policy so it is doable... wouldn't really work in the users personal store because the machine will not have access to this store until the user logged in...

OtakarKlier · ‎10-11-2018

Hello, I guess it depends on your companies requirements. We are under so many complance acronyms that split-tunneling is a no no. I'm sure there are use cases where split-tunneling is a good thing. However my approach is what's wrong wtih tunneling everything back to home base? This way all traffic is scanned and inspected by this wonderfully complex and expensive device called a PAN. Hope that helps.

OtakarKlier · ‎10-10-2018

Sorry I couldnt help more. Let us know how it goes.

welly_59 · ‎10-10-2018

Excellent news. While waiting for an answer here though ihave succesfuly configured it using a loopback interface on the FW (public IP on it, we have loads), and it all works

welly_59 · ‎10-09-2018

After a bit of effort I have managed to get prelogon working, generating a certain the firewall that is signed by our corporate trusted root ca. I imported that onto my own laptop for testing purposes and all is well, but I really need an automated way to get this onto 100+ assets. Is there a config to do this working globalprotect or can anyone advise how to do this via group policy? For group policy, I can’t find a way to install it into the computers ‘personal certificate’ folder, does it have to be in there?

welly_59 · ‎10-09-2018

Sorted it. I had a "subordinate CA" cert on the fw already, which was signed by our root CA. I used the subordinate CA to generate a certificate, which i then installed on my corporate laptop. Finally i created a certificate profile, referencing the subordinate CA, and attached this to the gateway config. Prior to logging in the windows login page now shows "connected" Ive rolled back for now while i come up with a rollout plan to push the certificate to all machines

BPry · ‎10-07-2018

@welly_59, Not something you are going to be able to fix. Open a support ticket with these logs and request an RMA.

OtakarKlier · ‎10-05-2018

Hello, They are up to code release 8.0.13 so you might want to read the release notes as there were a lot of fixes and vulnerabilities patches since 8.0.3. https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os-release-notes Regards,

OtakarKlier · ‎10-05-2018

Hello, Set both ports to Auto. The PAN cannot be forced to full duplex for a 1gb link. This is because a 1gb link cannot be half duplex. Hope this helps.

qasim02 · ‎09-24-2018

Hi welly, it's slow connectivity and intermittent ping /connection drops. which lasts for 4 to 5 hours and then disappears. so extremely hard to troubleshoot.

vsys_remo · ‎09-03-2018

@welly_59 Other than @santonic I think you're talking about outbound decryption, right? Is it a java application? In case of that when the developpers do their job and check the certificate chain in a TLS connection, then this might be the reason because java has it's own certificate trust store.

reaper · ‎08-29-2018

*.work.com *.work.com/ --edit-- also "work.com" and "work.com/" if there's no subdomain

Date Registered	‎06-13-2018 01:15 AM
Date Last Visited	‎11-08-2018 07:04 AM
Total Messages Posted	68
Total Likes Received	6

Online Status	Offline
Date Last Visited	‎11-08-2018 07:04 AM

About welly_59

Pre-Logon Machine Certificate placement

Globalprotect pre-login split tunnel best practise?

Re: GP VPN causing slowness from one location only

Re: Multiple GlobalProtect Gateways on same interface?

Multiple GlobalProtect Gateways on same interface?

Multiple GlobalProtect Gateways on same interface?

Re: Pre-Logon GP VPN

PAN-OS 8.1.3 in production environment?

Re: Palo-Cisco VPN Logs

Re: GlobalProtect LDAP Authentication Fails

Re: Unable to access Windows Store (Windows 10 + GP 3.0.2)

Re: Unable to access Windows Store (Windows 10 + GP 3.0.2)

Re: Internal host detection not Working

Re: Globalprotect client config - force push portal config update?

Re: Pre-Logon Machine Certificate placement

Re: Globalprotect pre-login split tunnel best practise?

Re: GP VPN causing slowness from one location only

Re: Multiple GlobalProtect Gateways on same interface?

Installing shared certificate for prelogon into machines personal certificate folder

Re: Pre-Logon GP VPN

Re: Stuck in Failsafe bootloader after reboot

Re: PAN-OS 8.1.3 in production environment?

Re: PaloAlo ports not coming up!

Re: logical interface packets drops

Re: SSL Decryption breaks certain website functionality

Re: SSL Decryption Exclude List - correct syntax?

Strata

Prisma

Cortex

About welly_59