About Oleksandr

Hi There, I've opened the case and the problem was resolved. Kind regards, Alex ... View more

Hi, Session        33666223332         c2s flow:                 source:      192.168.31.90 [Trust]                 dst:         23.58.191.86                 proto:       6                 sport:       3023            dport:      443                 state:       INIT            type:       FLOW                 src user:    unknown                 dst user:    unknown                 qos node:    ethernet1/3, qos member N/A Qid 0         s2c flow:                 source:      23.58.191.86 [Untrust]                 dst:         x.x.x.x                 proto:       6                 sport:       443             dport:      4632                 state:       INIT            type:       FLOW                 src user:    unknown                 dst user:    unknown                 qos node:    ethernet1/4, qos member N/A Qid 0         DP                                   : 1         index(local):                        : 111790         start time                           : Wed Jul 22 08:29:39 2015         timeout                              : 15 sec         total byte count(c2s)                : 748         total byte count(s2c)                : 5230         layer7 packet count(c2s)             : 8         layer7 packet count(s2c)             : 8         vsys                                 : vsys1         application                          : ssl          rule                                 : my_test         session to be logged at end          : False         session in session ager              : False         session updated by HA peer           : False         address/port translation             : source         nat-rule                             : source-nat-outside(vsys1)         layer7 processing                    : enabled         URL filtering enabled                : False         session via syn-cookies              : False         session terminated on host           : False         session traverses tunnel             : False         captive portal session               : False         ingress interface                    : ethernet1/4         egress interface                     : ethernet1/3         session QoS rule                     : N/A (class 4)         tracker stage firewall               : TCP RST - client         end-reason                           : tcp-rst-from-client ... View more

Hi SLawek, my_test {   option {     disable-server-response-inspection no;   }   from Trust;   to Untrust;   source [ my_IP_address];   destination any;   source-user any;   category any;   application any;   service any;   hip-profiles any;   action allow;   log-start yes;   log-end no;   negate-source no;   negate-destination no;   description "Temporary_test rule";   disabled no;   tag Internet; } [edit] ---NO SSL decryption--- I"ve tested on IE, Chrome and FF PAN-OS 6.1.1 Kind regards, Alex ... View more

For "Field Identifier" I use the following strings: Username Prefix ->  cldcClientUsername.0= Username Delimiter -> , Address Prefix -> cldcClientIPAddress.0= Address Delimiter -> , ... View more

I've opened the case ... View more

Thank you roe answer Yes, the configuration was not changed after upgrade, but THAT signature started blocking valuable server, so I decided to change the rule. Probably,  "exception" feature has changed the logic in new version? ... View more

Hi! Any updates for this? Thanks, Alex ... View more