This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences

About mbeghdadi

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
mbeghdadi
‎06-21-2017
since ‎10-23-2014
L2 Linker
User Activity
User Profile
Latest posts by mbeghdadi
View All
My Liked Posts
View All
User Badges
Community Statistics
Member Since ‎10-23-2014 08:40 AM
Date Last Visited ‎06-21-2017 06:05 AM
Posts 24
Total Likes Received 1

Global Protect does not Work after transfering licences from PA-500 to OSS SPARE

by in General Topics
‎05-06-2016 01:03 AM
‎05-06-2016 01:03 AM
Hello To All,   I'm facing an issue after doing a migration.   We'd an issue with a FAN on PA-500, so RMA works fine  We decided to transfer licences from PA-500 fan error to OSS Spare. Everything went well until we do realize that Global Protect is not working anymore.   The Synch between AD/LDAP and PALO is OK When we try to log-in to Global protect through the agent We got an error "portal status is User authentication failed"   Could you please let me know if there are some checks r procedure to investigate further.. ... View more

Re: Blocking Facebook for a group of USERS

by in General Topics
‎04-17-2015 08:16 AM
‎04-17-2015 08:16 AM
Thanks a lot for your quick support !! ... View more

Re: Blocking Facebook for a group of USERS

by in General Topics
‎04-17-2015 07:23 AM
‎04-17-2015 07:23 AM
Thanks for your feedback, How do you proceed on the policy.. Could you please give me an example on how to configure the policy rule? ... View more

Blocking Facebook for a group of USERS

by in General Topics
‎04-17-2015 05:59 AM
‎04-17-2015 05:59 AM
Hello To All, We've a PA-500 which is linked to the AD. The idea is to block Facebook for a group of users. The thing is when those users will be logged (login and password), the AD update the PA-500. To block facebook for those users, What should be done? -1- Create a group of users -2- Create a Policy which include those users and a Deny rule for facebook DO we need something else? Thanks for your support and comments. Rgds M ... View more
Labels:

Re: ISSUE WITH GLOBAL PROTECT

by in General Topics
‎03-10-2015 07:48 AM
1 Kudo
‎03-10-2015 07:48 AM
1 Kudo
Hi, Thanks for your feedback, after investigation the issue was related to PFB..It was necessary to write a new rule stating that trafi from LAN to GP (global protect Zone) should not use PBF... After the commit, trafic is UP... ... View more

ISSUE WITH GLOBAL PROTECT

by in General Topics
‎03-10-2015 02:20 AM
‎03-10-2015 02:20 AM
We have configured One VR-1 only Ethernet 1/1 is a WAN interface Ethernet 1/2 is a WAN interface Ethernet 1/3 is a WAN interface Ethernet 1/4 is a LAN interface We’ve created ETH1-ZONE for Ethernet 1/1 ETH2-ZONE for Ethernet 1/2 ETH3-ZONE for Ethernet 1/3 ETH4-ZONE for Ethernet 1/4 VP –ZONE for all the tunnels (used for remote connection site with site-1 and site-2) GP-ZONE used for GLOBAL PROTECT STATIC ROUTE We’ve a set of static LAN to ETH1 LAN to ETH2 LAN to ETH3 LAN to LAN And VPN route using tunnels POLICIES We’ve setted up a bunch of policies LAN to WAN1 (ISP1) for Tunnel traffic and VPN traffic LAN to WAN2 (ISP2) for Webmail LAN to WAN3 (For Web browsing) We’ve created a PBF for forwading traffic from LAN to Ethernet 1/2 when it is about MAIL/WebMAIL activities We’ve an application override to force FTP application goes to LAN to LAN (through the MPLS network) due to asymmetric issues We've a Laptop which is connecte outside the office, and we  setup a connection through the PALO ALTO using GLOBAL PROTECT, the connection is established using ISP1. The VPN for Global Protect is UP and RUNNING The issue is the following: We cannot access to the LAN of the PA-500 We cannot access to Internet using the PA-500 BUT We can connect to remote-site-1; Remote-2 and last but not the least we can connect to the remote site which located accross the MPLS network. Does anyone has an idea or some guidance about this issue? Have we missed something? Could it be possible that the configuration is wrong? ... View more

Re: How to setup multiple IP Public address on PA-200

by in General Topics
‎02-13-2015 03:13 PM
‎02-13-2015 03:13 PM
Hello, I do appreciate your support and quick recommendations. I'll try to configure in the way you mentionned and get back to you guys.. Again thanks a lot !! ... View more

Re: How to setup multiple IP Public address on PA-200

by in General Topics
‎02-13-2015 02:26 PM
‎02-13-2015 02:26 PM
Hi All, Thanks for your quick feedback. so If I understood your points. Looks like I just ned to define an IP address for the WAN port interface? But which one ? 10.X.X.2; 10.X.X.3 and 10.X.X.4 ? Then I have to configure a One to One NAT rule ? But How? Like the one below NAT RULE source LAN Zone TRUST Source address  192.168.1.X to 192.168.1.Y (X could be 10 and Y 50) Destination WAN Zone UNTRUST Destination address 10.X.X.2 The idea is to have One FIREWALL, One ISP, but within the LAN, there are several companies and therefore each companies will get and be assigned with a range of IP LAN addresses and each company will get its own IP public address using a common WAN interface ... View more

How to setup multiple IP Public address on PA-200

by in General Topics
‎02-13-2015 12:52 PM
‎02-13-2015 12:52 PM
Hi, We're facing an architecture where there are multiple address that needs to be used for a specific pool of IP from the LAN interface. Let's supose that we have 3 IP PUBLIC address 10.X.X.2; 10.X.X.3 and 10.X.X.4 and the gateway has the IP 10.X.X.1 From the LAN interface we might expect to get a range of IP Pool addresses 192.168.1.X to 192.168.1.Y 192.168.1.Z to 192.168.1.W 192.168.1.T to 192.168.1.U Traffic from the LAN to the WAN should expect the rule as stated below: LAN from 192.168.1.X to 192.168.1.Y to WAN 10.X.X.1 192.168.1.Z to 192.168.1.W to WAN 10.X.X.2 192.168.1.T to 192.168.1.U to  WAN 10.X.X.3 First question, Can we define a PORT INTERFACE with multiple IP public interface? If so, Second Question, Shall we create a NAT rule for each range of IP pool? Do we need to create several static route within the VIRTUAL ROUTERS  as we have several IP addresses. Your thoughts are much appreciated... ... View more
Labels:
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎06-21-2017 06:05 AM
Latest Tags
No tags yet
Likes Given To
View All
Likes From
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks