Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
- COVID-19 Response Center
About Nehmaan
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About Nehmaan
2 weeks ago
18Posts
2Likes
0Solutions
Oct 11, 2021Last Visited
User
Activity
User
Profile
Latest posts by Nehmaan
| Subject | Views | Posted |
|---|---|---|
| 2380 | 04-01-2020 09:14 AM | |
| 2408 | 04-01-2020 06:29 AM | |
| 2948 | 04-01-2020 06:10 AM | |
| 2977 | 04-01-2020 04:31 AM | |
| 3035 | 03-31-2020 04:26 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 Likes | 02-26-2020 02:44 AM |
User Badges
Community Statistics
| Member Since | 09-18-2018 03:12 AM |
| Date Last Visited | 2 weeks ago |
| Posts | 18 |
| Total Likes Received | 2 |
04-01-2020
09:14 AM
The only case I've seen that is when the certificate is not valid for SAML purposes. Which provider are you using ? Do you not have an XML file which you can import, Modify CA flag and commit the change ?
... View more
04-01-2020
06:29 AM
No problem. Shout if you get stuck or need more help.
... View more
04-01-2020
06:10 AM
Nothing to do with Palo, Here you go mate.
... View more
04-01-2020
04:31 AM
Is that the actual certificate ? It's a root CA so it's going to have the CA flag already set. Export candidate-config:
... View more
03-31-2020
04:26 AM
You tried the workaround I mentioned ?
... View more
02-27-2020
10:44 AM
You just have to "No-Decrypt" the following two categories. Within Anyconnect if you use: IP: Unknown Category DNS: Low-Risk Category
... View more
02-26-2020
03:17 AM
Yes, On the assumption that the security rules doesn't exist. It does in my case.
... View more
02-26-2020
02:44 AM
2 Kudos
OK got this working for now but not exactly the way I want. 1) Tag 2) Address Group 3) SSL Decryption Policy 4) Log Forwarding 5) Built-in Actions 6) Security Rule
... View more
01-07-2020
02:10 PM
Interesting! Give the daemon a restart: debug software restart process log-receiver Also take a look at the following links, They might help: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmA4CAK https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClozCAC
... View more
01-07-2020
12:18 AM
Can you run the commands from CLI: debug log-receiver statistics debug log-receiver on debug tail follow yes mp-log logrcvr.log
... View more
01-06-2020
12:07 AM
One switch or two switches ? Checked STP topology changes ? Checked logs on the switch ? Do you have EtherChannel configured ? Looking at the release notes, Can't spot any known issues related to OSPF.
... View more
01-05-2020
11:57 PM
Have you created any rules and or enabled loging at "session start/end" ? Do you have traffic passing through the device ? You can also enable logging for "intrazone-default" which is great for troubleshooting.
... View more
01-03-2020
03:33 PM
No worries. 🙂 Think you need it for response and assertion to work correctly. Therefore, You'll need to ensure the CA flag is set. I'm not 100% sure if that's how your supposed certs for this as neither Palo Alto nor Azure actually tell you how to do the certs correctly. 😞
... View more
01-03-2020
03:17 PM
How did you define it within the authentication profile, certificate profile and SSL/TLS Service Profile ? You can only select certs which have the CA flag set under "Certificate Profiles" which is then referenced within the "authentication profile". For the "SSL/TLS service profile" the same applies but I've used a signed wildcard cert instead and imported the chain under "Certificates" to complete the trust. Using SAML for Global Protect VPN.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
2 weeks ago
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
