This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About snisar
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About snisar
04-30-2020
14Posts
7Likes
4Solutions
Apr 30, 2020Last Visited
User
Activity
User
Profile
Latest posts by snisar
| Subject | Views | Posted |
|---|---|---|
| 10946 | 09-12-2012 11:28 PM | |
| 3932 | 09-12-2012 05:38 PM | |
| 1996 | 01-23-2012 08:47 PM | |
| 3467 | 01-23-2012 08:34 PM | |
| 7367 | 01-23-2012 08:20 PM | |
| 2742 | 01-23-2012 07:51 PM | |
| 1370 | 11-23-2011 07:09 PM | |
| 3945 | 11-18-2011 12:01 AM | |
| 1263 | 11-08-2011 09:06 PM | |
| 2088 | 11-08-2011 03:59 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 11-23-2011 07:09 PM | |
| 1 Like | 11-08-2011 09:06 PM | |
| 1 Like | 09-12-2012 11:28 PM | |
| 1 Like | 01-23-2012 08:34 PM |
User Badges
Community Statistics
| Member Since | 01-20-2011 03:34 PM |
| Date Last Visited | 04-30-2020 08:03 PM |
| Posts | 14 |
| Total Likes Received | 4 |
09-12-2012
11:28 PM
1 Kudo
The limit is in the number of groups and user-mappings each firewall can hold. For now it is 64K users and 640 groups. Per my understanding, there is no hard limit of maximum number of users each group can hold. You can have all 64k users in one group or can evenly or unevenly distribute them in each group. Please let me know if this is helpful.
... View more
09-12-2012
05:38 PM
Without source NAT, untagged subinterfaces will not work. We have to map traffic to a particular zone/vsys based on the destination of that packet (it must match a subinterface IP address). Please refer to following doc in order to configure right NAT rules for untagged subinterfaces. Please let us know if that helps. https://live.paloaltonetworks.com/docs/DOC-2781
... View more
01-23-2012
08:47 PM
For Issue#1; Please check "user identification" is enabled on the zones which are associated to those VLANs. For Issue#2; You need to check Routing and NAT rules to make sure whether it is done properly. If config on either issues looks fine, you can contact support.
... View more
01-23-2012
08:34 PM
1 Kudo
In your DMZ Inbound NAt rule, please replace "DMZ_Installs" with "Untrust" under destination zone. After commiting this change, your issue should be resolved, please let me know. -snisar
... View more
01-23-2012
08:20 PM
Please open up a support case by logging into support.paloaltonetworks.com or calling in at +1-866-898-9087
... View more
01-23-2012
07:51 PM
Please select the interface where External FW IP is configured as "Destination Interface"
... View more
11-23-2011
07:09 PM
1 Kudo
Currently, we only do "user" identification through Active Directory. One option to acheive what you want is to use "Global Protect" feature for all internal and remote users to log in to corporate network. It basically replaces ssl-vpn for remote users. You can configure "Computer Name" under HIP Profile for Global protect users to be identified only when they try to login through that particular computer. Again, there is lot of manual work required for it to work, you need to manually enter each compuetr name under HIP profile and match registery entry realted to that computer. https://live.paloaltonetworks.com/docs/DOC-1757 Please feel free to contact us if you have question.
... View more
11-18-2011
12:01 AM
Sure, you can select Applications like web-browsing to go through one ISP and SMTP through another under PBF rules to do application based routing.
... View more
11-08-2011
09:06 PM
1 Kudo
Object to IP or FQDN mapping is unique. We cannot use two objects for a single IP or FQDN.
... View more
11-08-2011
03:59 PM
The overflow packets get queued up based on their Class Priority, like Class1 is real time and Class8 is best effort. Let say if you have all ineteresting class1 traffic coming up so class 8 traffci had to wait in queue until it passthru or timeout.
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks