About lauro7

lauro7 · ‎06-25-2014

I am using PANOS 5.0.11 agent-less. LA

lauro7 · ‎06-25-2014

Hi, I have a domain with special character "&" in the NetBios domain name. In the FQDN name this character has been substituted by "e". By user-identification, PAN discover the users, but some have the "&" character in domain name and some have "e" character in domain name. Then the user's identification doesn't operate well. There is a workaround for this problem ? Thanks. LA

lauro7 · ‎10-28-2013

How can I set a size limit for user to upload files with Skydrive ? Is it possible ? Thanks.

lauro7 · ‎09-16-2013

Thank you for your help, but my question is different. I tried by logging policies rules and I find that it's need to permit, in the security policies, the traffic from the IP addresses of the interfaces, on which I have enabled DNS proxy, destinated to the public DNS configured in the DNS proxy form. Then DNS proxy is correctly enabled and solve all requests received from the users. Without this security policy rule the appliance was not able to redirect DNS queries to public DNS. Best Regards. LA

lauro7 · ‎09-16-2013

I have configured DNS Proxy on a PA200 with PANOS 4.1.9, with two interfaces enabled for DNS proxy service and two default public DNS as primary and secondary. But on system monitor, on DNS Proxy object, I find: "Failed to resolve domain name: <domain-name > after trying all attempts to name server(s): 8.8.4.4 8.8.8.8 . Which is the source IP address of the DNS request executed by DNS-Proxy ? Is this the problem or other ? Thanks.

lauro7 · ‎07-11-2013

Hi Panos, I have solved with the rule "new" that you suggested. With this rule at top I am able to connect by HTTP and HTTPS. The problem was that my customer, by himself, introduced a rule at bottom like "deny any any any any...." after the normal rules to log all traffic denied ("after some changes he said me" ). He said that in previous PANOS releases ( e.g. 4.1.8) this "deny all rule" worked fine....I don't know...but I suggest him to specify in the deny rule at least one source zone and not any.. any. What is your opinion ? Thanks. Regards Lauro

lauro7 · ‎07-11-2013

I tried http, but the output was this: Web Page Blocked Access to the web page you were trying to visit has been blocked in accordance with company policy. Please contact your system administrator if you believe this is in error. User: 192.168.86.167 URL: 192.168.2.2/ Category: private-ip-addresses and that is strange....192.168.2.2 is the management IP address...

lauro7 · ‎07-11-2013

Yes, I tried, but this is the output. I think it is for the cli connection lost. But GUI is still not running. Thanks. ____________________________________________________ Process 'mgmtsrvr' executing RESTART Jul 11 12:30:26 Error: pan_read_full(comm_utils.c:97): srvr: fatal recv error. sock=3 err=Connection reset by peer (131) admin@FW12003> _____________________________________________________________________________

lauro7 · ‎07-11-2013

I have tried, but Web GUI is still not running.

lauro7 · ‎07-11-2013

Hi, I have a PA-200 with PANOS 4.1.13. After some changes in configuration and after a commit, I lost connection to the management interface and now it is impossible to connect by web GUI. Only SSH CLI is running. How can I check by CLI what happened ? The system services SSH, HTTPS and PING are enabled and all IP are permitted to connect to management interface. The system process mgmtsrvr is running and the group mgmt_service is running. _ Thanks.

lauro7 · ‎02-04-2013

Thank you, I confirmed the configuration using the KB-doc you suggested me and now the WMI connection from appliance and DC is working. Bye. LA

lauro7 · ‎02-02-2013

Hi, I have installed a PA200 with PanOS 5.0.2 and on-device User-ID agent. I have connected my device on a network with a DC Windows 2008R2 and I have configured User Mapping and Group Mapping Settings as explained in the Getting_Started_Guide_PanOS 5.0 document, but in the Server monitoring tab the status stays on "Not connected". The MGT interface is on the same LAN as the DC and I have turned off the firewall policies on the server. What can I do to troubleshoot this problem ? Thanks. LA

lauro7 · ‎10-26-2012

I have same problem with GP 1.1.7, and because my portal isn't registered on DNS as FQDN, I have done exactly what you suggested, that I have used IP address in CN, SAN, and IP of portal and gateway, but certificate error is still present. I have also imported that certificate on my browser, but nothing...I think to downgrade GP to 1.1.6. Regards.

lauro7 · ‎10-08-2012

If I block the "online-personal-storage" category, it's not enough. My focus is to allow "docs.google.com" and block all others, all the categories. Have I to block all categories, category by category ? Is there a more simple way ? Thanks.

lauro7 · ‎10-07-2012

I have tried so, but it doesn't work, perhaps because ssl is involved ?

Member Since	‎09-20-2010 06:43 AM
Date Last Visited	‎09-21-2015 09:21 AM
Posts	28
Total Likes Received	1

Online Status	Offline
Date Last Visited	‎09-21-2015 09:21 AM

About lauro7

Re: Special Character in domain name

Special Character in domain name

Size limit upload for application and user

Re: DNS Proxy

DNS Proxy

Re: management GUI issue

Re: management GUI issue

Re: management GUI issue

Re: management GUI issue

management GUI issue

Re: Problem VPN Split-Tunneling

Re: Special Character in domain name

Special Character in domain name

Size limit upload for application and user

Re: DNS Proxy

DNS Proxy

Re: management GUI issue

Re: management GUI issue

Re: management GUI issue

Re: management GUI issue

management GUI issue

Re: PanOS 5.0 on-device User-ID agent

PanOS 5.0 on-device User-ID agent

Re: Problem with certificate after upgrading GlobalProtect 1.1.7

Re: allow single url

Re: allow single url

Unlock your full community experience!

About lauro7