Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About VincentPresogna
About VincentPresogna
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Friday
47Posts
15Likes
6Solutions
Apr 09, 2021Last Visited
User
Activity
User
Profile
Latest posts by VincentPresogna
| Subject | Views | Posted |
|---|---|---|
| 155 | 2 weeks ago | |
| 158 | 3 weeks ago | |
| 384 | 01-15-2021 10:22 AM | |
| 1346 | 12-03-2020 08:51 AM | |
| 561 | 10-30-2020 11:26 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 3 weeks ago | |
| 1 | 12-03-2020 08:51 AM | |
| 1 | 08-19-2020 09:32 AM | |
| 1 | 08-19-2020 02:35 PM | |
| 1 | 02-13-2020 11:07 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 2 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 08-21-2018 10:49 AM |
| Date Last Visited | Friday |
| Total Messages Posted | 47 |
| Total Likes Received | 15 |
2 weeks ago
This might help. There is a section for Ubuntu 18, but says "experimental". https://github.com/PaloAltoNetworks/minemeld-ansible
... View more
3 weeks ago
1 Kudo
What I would probably do is, reset the hit counters for that rule, and then see if it gets any hits. If it doesn't get any hits over a few days, then it should be safe to disable it.
... View more
01-15-2021
10:22 AM
Hi All, I have an issue I am not sure how to address. I have "Exclude video traffic from the tunnel" enabled on the GP gateway. When a user connects and tries to watch a video on our wordpress intranet site, http:/myintranetsite/somevideo embedded in the page, it kills the session in the browser. I get one of those "oops, something went wrong". When I uncheck the exclude video, all works well. So the question is, how can I have it enabled, but not exclude video traffic from our intranet site? Thanks
... View more
12-03-2020
08:51 AM
1 Kudo
Just a shot in the dark here. If I remember right, Chrome uses QUIC. Maybe try blocking it and see what happens. I block it on my PA so I can decrypt the traffic. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/define-traffic-to-decrypt.html
... View more
10-30-2020
11:26 AM
@BPry Thanks for your input, it did lead me down the correct path, though inadvertantly. Show all jobs didn't show anything. I checked both the masterd and paninstaller logs, but didn't find anything that stuck out to me. What I did do was make a change to the configuration and commit it. It came back with a commit failure, use 'commit force'. Something about auto-commit stuck failure. Ok, so I go into the cli and do a commit force, it came back with some validation errors due to the absence of licenses for some of my objects, "URL Filtering" to be exact. Once I removed the objects causing the validation error, I was able to commit the configuration. After that I was able to commit the panupv2-all-apps-8336-6373 update. Then after that I was able to go from 9.0.9 to 9.1.5. This command was very helpful in the debugging of the issue, 'tail follow yes mp-log ms.log'
... View more
10-29-2020
01:53 PM
It is registered, and has been since I received it. I have followed this procedure before with out issue. Don't know why you can see the link.
... View more
10-29-2020
01:05 PM
Thanks, but that doesn't answer anything. According to this, https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CltxCAC, under the Maintaining the OSS device section it states, "The following steps will keep the OSS on the same PAN-OS release as the production device. Perform these steps each time the production device is upgraded." So why does step 2 fail?
... View more
10-29-2020
10:49 AM
Hi all, Figured I'd ask here before contacting support. Last weekend I upgraded my production PA's from 9.0.9 to 9.1.5. Everything went smooth. Due to company requirements we are to upgrade the software on the OSS box, yet it fails with content update. I have downloaded the latest content, panupv2-all-apps-8336-6373, and was able to upload it through the GUI. When I hit OK to apply it it first comes up with this I click Yes, and then it comes up with this I am kind of stumped here. Any input would be appreciated.
... View more
10-27-2020
10:32 AM
@raji_toor I see we are in the same boat then, so to speak. Luckily for me, my user base is relatively small and rarely come across this issue much any more since I implemented decryption. Would be nice if maybe there was an EDL that could do this. But this poses the question, how to populate the EDL FQDN's of known decryption offenders.
... View more
10-27-2020
08:58 AM
What I did was create a Custom URL Category, Lets call it "SLL work arounds". I then apply that in my decryption policy, lets call that "No-decrypt work around". Make sure you go to the Options tab for the rule and set it to "No Decrypt", and set the Custom URL in the Service/URL catagory tab. So when I come across a site that doesn't decrypt properly, I just add the url to the "SSL Work arounds" policy. So say www.badSSLplayer.com is throwing a browser warning, i'll add *.badSSLplayer.com to the list.
... View more
09-01-2020
03:22 PM
After you installed mysql/mariadb did you run mysql_secure_installation ?
... View more
08-21-2020
08:32 AM
Thanks @SutareMayur , that's what I figured, just wasn't sure. @BPry , thanks for the tip about "release notes under 'Associated Software and Content Versions' section". I knew it had to be somewhere, I guess I wasn't looking hard enough. I'll remember that for future reference.
... View more
08-20-2020
12:31 PM
Quick question, are GP client versions tied in any way to PanOS versions? I am running PanOS 9.0.9-h1, and GP 5.0.9. Will updating to GP 5.2.1 cause any issues?
... View more
08-19-2020
02:35 PM
1 Kudo
Glad you got it all sorted out and thanks for the update.
... View more
08-19-2020
09:32 AM
1 Kudo
There are 2 ways to get firmware updates, you either click "Check Now" , which is what I do, and it will give you a list of the firmware available. You can't then "Download" it. If you are using the "upload" method, that means you are grabbing the image from you Palo Alto portal and doing a manual update. You are running a licensed PA, correct?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
Friday
|
Latest Tags
No tags yet
Likes From
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
