About VincentPresogna

VincentPresogna · ‎03-24-2020

Sorry, I can't help with this. I have been running 9.0 versions, wasn't until 9.0.5 that it was fixed. I am also doing LDAP auth against active directory.

VincentPresogna · ‎03-24-2020

What version of PAN-OS are you running. There are some versions that had a bug when using a scoped LDAP group.

VincentPresogna · ‎03-09-2020

I edited the second line of the xml files, <entry name="ncaa2019-video"> to <entry name="ncaa2020-video"> and <entry name="ncaa2019-mml"> to <entry name="ncaa2020-mml">. Now it shows as ncaa2020. Sounds to me like they are just using the same application signature as last year, most likely nothing has changed.

VincentPresogna · ‎03-03-2020

Try using https://panwdbl.appspot.com/lists/mdl.txt

VincentPresogna · ‎02-13-2020

That should be all there is to it. Nothing additional needs to be changed.

VincentPresogna · ‎12-19-2019

Putty can save screen output to a file. Look in sessions, then logging under that.

VincentPresogna · ‎11-19-2019

This should help, https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFLCA0

VincentPresogna · ‎11-19-2019

I notice 9.0.5 is out, you may want to try that.

VincentPresogna · ‎11-05-2019

Thanks Steve, That's pretty much what my conclusion was also, just wanted some verification.

VincentPresogna · ‎11-05-2019

I can't seem to find a clear answer to this, and there may not be one. I have a VPN tunnel between 2 sites, both on PA-820's. Would "disable server response inspection" on the VPN policy on both sides benefit from this? What are the potential downsides if I did do this?

VincentPresogna · ‎11-01-2019

I have my PA-820 running 9.0.4 since it was release. Haven't had any issues, and it even resolved an issue I was having with LDAP group mappings.

VincentPresogna · ‎10-15-2019

You don't need 8.1.9, just 8.1.0 & 8.1.9-h4

VincentPresogna · ‎10-03-2019

I deployed 9.0.4 a couple days ago. I have had no issues so far. It also fix an LDAP bug I was encountering in the previous versions of the 9.0.x releases.

VincentPresogna · ‎09-18-2019

Awesome. Thanks. Took me about a day to get this up and running on Ubuntu 18. The installation of Java 8 has changed, the PPA repo is no longer a viable solution, had to install it manually. The only other thing that tripped me up was the sysylog port, it was 5514 instead of the usual 514. Once I changed that on the syslog forward in the PA, everything started flowing ing in.

VincentPresogna · ‎09-18-2019

Sound like the repo isn't setup correctly First make sure you run this command wget -qO - https://minemeld-updates.panw.io/gpg.key | sudo apt-key add - That will add the trust key Second , run this sudo add-apt-repository "deb http://minemeld-updates.panw.io/ubuntu xenial-minemeld main" sudo apt update That will add the minemeld repo Third, After you add the minemeld repo and then do a sudo update, you'll get an error about i386. To over come that I added [arch=amd64] to the apt sources list in /etc/apt/sources.list eg; deb [arch=amd64] http://minemeld-updates.panw.io/ubuntu xenial-minemeld main After all that sudo apt install -o Dpkg::Options::="--force-overwrite" -y minemeld

VincentPresogna · ‎09-14-2019

Thanks BPry. It was a joke about "just me". I assume if it's affecting me, it's affecting everyone one else since it's a global policy. With that out of the way; I agree, enabling SSL decrytption shouldn't cause anything with spotify, that's the weird part. I have logging on the interzone-default policy. I'll puruse those logs on Monday when I am in the office. The interesting part is when playing spotify in a web browser with developer tab open to track what calls are being made, I see different results with SSL enable versus disabled. I haven't tried the spotify app though, just the web browser. I would assume the app behaves the same way, since all it does is make calls to thier website. From my initial looks at the logs I didn't see anything being denied. In the developer trace is do see references to Access-Control-Allow-Origin which is a part of Cross-origin resource sharing. If i find the issue, I'll report back.

VincentPresogna · ‎09-13-2019

Hi All, Today I decided to implement SLL Forward decryption. Everything is working great except for one thing, Spotify. I know what you'll say, "You allow spotify?. Yes, but just for me. With decryption disabled spotify works fine, with it enabled it just skips through all the song in my playlist. Any idea what could be causing this?

VincentPresogna · ‎09-10-2019

I would say 5.0.4. I have been running it since it's release with out issue.

VincentPresogna · ‎09-05-2019

My guess is because it is a reserved address range. The 0.0.0.0/8 network is reserved by IANA as per RCF 5735

VincentPresogna · ‎09-05-2019

Sorry about that, this is the link https://live.paloaltonetworks.com/t5/MineMeld-Articles/Manually-Install-MineMeld-on-Ubuntu-Server-16-04/ta-p/253336

VincentPresogna · ‎09-05-2019

On the page you posted it says, Resolution This article relates to PAN-OS 7.1 and prior, for PANB-OS 8.0 and later, please refer to this article. Notice it is in the device tab

VincentPresogna · ‎07-02-2019

There is one issue I have encountered on 9.x. Using an active directory group to limit GlobalProtect VPN doesn't work. I created a group for VPN users. It worked fine in 8.1.x. After I upgraded to 9 I had to allow everyone, becuase if I just scoped it to a group, no one could login. Besides that one bug, everything is working smooth on my PA-820.

VincentPresogna · ‎06-20-2019

I use mytenant.mail.protection.outlook.com for SMTP address. Obviously replace mytenant with yours. Like Robin indicated, I am sending mail within my domain.

VincentPresogna · ‎06-20-2019

Interesting. I have my PA-820 sending email to Office365.

VincentPresogna · ‎06-11-2019

The only browser that worked consistantly for me was Edge for all the training videos.

VincentPresogna · ‎05-31-2019

Thank's to both of you. I was able to create a simple rule to block/drop that dang ip. I used Kiwi's idea for it. I made a drop rule for that ip with ipsec and ike as the service. BPry, thanks for the MineMeld idea. I was able to get that setup in a day and it's working also.

VincentPresogna · ‎05-29-2019

I setup a minemeld on Ubuntu 16 just yesterday. I used this guide. https://live.paloaltonetworks.com/t5/MineMeld-Articles/Manually-Install-MineMeld-on-Ubuntu-Server-16-04/ta-p/253336 One hitch though. After you add the minemeld repo and then do a sudo update, you'll get an error about i386. To over come that I added [arch=amd64] to the apt sources list in /etc/apt/sources.list deb [arch=amd64] http://minemeld-updates.panw.io/ubuntu xenial-minemeld main

VincentPresogna · ‎05-24-2019

Thank for the inputs. I'll see what I can manage.

VincentPresogna · ‎05-23-2019

I am seeing this in my system logs. IKE phase-1 negotiation is failed. Couldn't find configuration for IKE phase-1 request for peer IP 172.250.246.42[500]. How can I block this? I been a Cisco guy for a longtime and new to Palo Alto. On my old cisco asa I could block an ip at the control plane like this. access-list cp-outside deny udp host 172.250.246.42 any eq 4500 access-list cp-outside deny udp host 172.250.246.42 any eq 500 access-list cp-outside deny esp host 172.250.246.42 any What would be the equivelant for Palo Alto?

VincentPresogna · ‎05-14-2019

That's odd. I see it in both 8.1.7 and 8.1.8

Date Registered	‎08-21-2018 10:49 AM
Date Last Visited	Wednesday
Total Messages Posted	31
Total Likes Received	11

Online Status	Offline
Date Last Visited	Wednesday

Strata

Prisma

Cortex

About VincentPresogna