This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About mrkskhn
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About mrkskhn
03-31-2020
9Posts
4Likes
0Solutions
Mar 31, 2020Last Visited
User
Activity
User
Profile
Latest posts by mrkskhn
| Subject | Views | Posted |
|---|---|---|
| 9566 | 01-20-2020 08:55 AM | |
| 22992 | 01-16-2020 05:21 AM | |
| 2506 | 01-15-2020 08:14 AM | |
| 23075 | 01-15-2020 12:20 AM | |
| 32731 | 01-13-2020 02:48 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 4 Likes | 01-20-2020 08:55 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 06-21-2018 07:56 AM |
| Date Last Visited | 03-31-2020 09:19 AM |
| Posts | 9 |
| Total Likes Received | 4 |
01-20-2020
08:55 AM
4 Kudos
Sounds like a feature which the PA team should consider? For my point of view it's more like a bug. If browsers can view the page, the PA should do it too. For our users the current state is very bad - they will assume the page (e.g. of a customer) is not working, but instdead we have to whitelist it to exclude it from decryption.
... View more
01-16-2020
05:21 AM
That would be great. i'm looking forward to hearing from you.
... View more
01-15-2020
08:14 AM
Some more trouble with decryption: https://www.lobster.de/ This page gets an untrusted paloalto cert, even it's a valid certificate? Can someone confirm this on his paloalto decryption setup?
... View more
01-15-2020
12:20 AM
1erforum.de is using: The connection to this site is encrypted and authenticated using TLS 1.2, ECDHE_RSA with P-256, and AES_128_GCM. di.fm (same error here too) is using: The connection to this site is encrypted and authenticated using TLS 1.2, ECDHE_RSA with P-256, and AES_128_GCM. At this point ssl decryption gets pointless, since a lot of websites are using this combination. Looks like a firmware issue?
... View more
01-13-2020
02:48 AM
Hi paloalto community, we're currently still testing ssl decryption and discovered a new error, which I can't google to find a solution. If we're visiting the following site, we get an "ERR_HTTP2_INADEQUATE_TRANSPORT_SECURITY" error. Site: https://www.1erforum.de/ See attached our configuration and ssl information without decryption enabled. Firmware and Specs: PA 850 - FW 9.0.5 Settings: Decryption disabled: Decryption enabled:
... View more
01-06-2020
12:36 AM
Same with different browsers
... View more
12-30-2019
05:22 AM
Hi paloalto community, I tested my new ssl decryption rules against the badssl dashboard ( https://badssl.com/dashboard/ ). So far it looks good. Unfortunately the check for sha1-intermediate doesn’t pass. Our PA-850 (Firmware 9.0.5) does create a secure connection to this site for the client ( https://sha1-intermediate.badssl.com/ ), even I configured to not support SHA1. Here is my configuration: Is there something I forgot to configure? Thanks and best regards, Markus
... View more
- Tags:
- decryption
- sha1
- ssl
06-22-2018
01:01 AM
Is there an option to get a daily summary (report) of new events triggered by these filters?
... View more
06-21-2018
08:02 AM
Hi, is it possible to get a daily/weekly PDF Report over succeeded and failed GlobalProtect authentifications? I only found the CSV Export inside the system log with an active filter (like (eventid eq globalprotectportal-auth-succ)) . I'm looking for an automatic approach, with optionally a better layout. System Log Forwarding only works for every single log, not for an overview. Best Regards Markus
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-31-2020
09:19 AM
|
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks