Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
07-21-2020
18Posts
2Likes
0Solutions
Jul 21, 2020Last Visited
User
Activity
User
Profile
Latest posts by Nehmaan
| Subject | Views | Posted |
|---|---|---|
| 882 | 04-01-2020 09:14 AM | |
| 910 | 04-01-2020 06:29 AM | |
| 1167 | 04-01-2020 06:10 AM | |
| 1196 | 04-01-2020 04:31 AM | |
| 1254 | 03-31-2020 04:26 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 | 02-26-2020 02:44 AM |
User Badges
Public Statistics
| Date Registered | 09-18-2018 03:12 AM |
| Date Last Visited | 07-21-2020 09:21 PM |
| Total Messages Posted | 18 |
| Total Likes Received | 2 |
04-01-2020
09:14 AM
The only case I've seen that is when the certificate is not valid for SAML purposes. Which provider are you using ? Do you not have an XML file which you can import, Modify CA flag and commit the change ?
... View more
04-01-2020
06:29 AM
No problem. Shout if you get stuck or need more help.
... View more
04-01-2020
06:10 AM
Nothing to do with Palo, Here you go mate.
... View more
04-01-2020
04:31 AM
Is that the actual certificate ? It's a root CA so it's going to have the CA flag already set. Export candidate-config:
... View more
03-31-2020
04:26 AM
You tried the workaround I mentioned ?
... View more
02-27-2020
10:44 AM
You just have to "No-Decrypt" the following two categories. Within Anyconnect if you use: IP: Unknown Category DNS: Low-Risk Category
... View more
02-26-2020
03:17 AM
Yes, On the assumption that the security rules doesn't exist. It does in my case.
... View more
02-26-2020
02:44 AM
2 Kudos
OK got this working for now but not exactly the way I want. 1) Tag 2) Address Group 3) SSL Decryption Policy 4) Log Forwarding 5) Built-in Actions 6) Security Rule
... View more
01-07-2020
02:10 PM
Interesting! Give the daemon a restart: debug software restart process log-receiver Also take a look at the following links, They might help: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmA4CAK https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClozCAC
... View more
01-07-2020
12:18 AM
Can you run the commands from CLI: debug log-receiver statistics debug log-receiver on debug tail follow yes mp-log logrcvr.log
... View more
01-06-2020
12:07 AM
One switch or two switches ? Checked STP topology changes ? Checked logs on the switch ? Do you have EtherChannel configured ? Looking at the release notes, Can't spot any known issues related to OSPF.
... View more
01-05-2020
11:57 PM
Have you created any rules and or enabled loging at "session start/end" ? Do you have traffic passing through the device ? You can also enable logging for "intrazone-default" which is great for troubleshooting.
... View more
01-03-2020
03:33 PM
No worries. 🙂 Think you need it for response and assertion to work correctly. Therefore, You'll need to ensure the CA flag is set. I'm not 100% sure if that's how your supposed certs for this as neither Palo Alto nor Azure actually tell you how to do the certs correctly. 😞
... View more
01-03-2020
03:17 PM
How did you define it within the authentication profile, certificate profile and SSL/TLS Service Profile ? You can only select certs which have the CA flag set under "Certificate Profiles" which is then referenced within the "authentication profile". For the "SSL/TLS service profile" the same applies but I've used a signed wildcard cert instead and imported the chain under "Certificates" to complete the trust. Using SAML for Global Protect VPN.
... View more
01-03-2020
03:03 PM
How have you defined your certificates under authentication profile ? I have used a wildcard cert to sign SAML messages to IDP and the Azure Cert selected under "Certificate Profile". The only way to select the Azure Cert for "Certificate Profile" is to ensure it has the CA flag set. I can confirm that SAML response and assertion work.
... View more
01-03-2020
02:26 PM
Have you tried it yourself ? There is no "export" option under "SAML Identity Provider". I think you meant "Import". Even if you "Import" the XML from Azure, It doesn't set the CA flag. You still get an error on commit as well. Only way around it that I've worked out is what I mentioned previously.
... View more
01-03-2020
08:25 AM
Had same issue but managed to work around this. 1) Export XML config. 2) Set the CA flag. 3) Re-Import XML config. 🙂
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
07-21-2020
09:21 PM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
