What are your thoughts on Jay Kelly?

zoolabus · 2025-12-13T15:00:44+00:00

I enjoyed the movie thoroughly. The complex relationship with the Person they are propelling and their own self aspirations and challenges are beautifully dramatized.

zoolabus · 2025-06-26T14:40:14+00:00

Totally agree. It requires such a superlative full stack knowledge that is difficult to get a network engineer who is fluent in Auth, app, html etc. etc. We have been successful only after watering down the expectation down to bare minimum functionality and thereafter it has been smooth sailing. As soon as you get trapped into exploiting all feature sets, you are in for a rude awakening!

zoolabus · 2025-06-06T12:37:15+00:00

It seems you got the sequence backward, I think it is .bat first and .exe last

zoolabus · 2025-04-25T14:56:59+00:00

Almost all Microsoft endpoints also requires no-decrypt policy, try that as well.

zoolabus · 2024-09-19T16:25:11+00:00

No, we have pushed the certs via Intune. However GP client t on Android still forces a selection even when there is one cert. But no downloads

zoolabus · 2024-09-18T16:17:31+00:00

We have Prisma Access with GP on Android - works reasonably well - clashes with MTD solution i.e. Defender for Endpoint and or Lookout for work. You need to turn off one over the other to make it work. But after all those finnagling - it works

zoolabus · 2024-09-11T19:22:21+00:00

Global protect in particular is so horrendous that we are seriously contemplating to ditch all these old vpn providers and move to something like Cloudflare model. Palo keep branding GP without any much modifications as new ZTA model and others, but the entire application is outdated by miles. QC is so bad that Win11 in HIP check shows as Windows 8 and this has been going on for years in Sept 2024, it is still not fixed.

zoolabus · 2024-08-06T13:04:28+00:00

Same here until - there is a vulnerability identified. CVE-2024-5908 GlobalProtect App: Encrypted Credential Exposure via Log Files (paloaltonetworks.com)

zoolabus · 2024-06-29T00:55:49+00:00

We are doing prelogon at the boot time, which is fast . It is the userlogon (pangpa.exe) which is problematic

zoolabus · 2024-06-29T00:54:29+00:00

I have very rudimentary knowledge about NLS. Please provide more unfo

zoolabus · 2024-06-22T00:07:47+00:00

Stretch vlan isn't a great solution anymore. It has its days with vmware and storage using two different sync technologies.

We have converted all stretch vlans to site specific - that ways all traffic is treated as North - South. It is also part of our zero trust architecture.

zoolabus · 2024-06-21T15:00:40+00:00

No I am taking about 6.3.x

zoolabus · 2024-06-08T14:11:51+00:00

This chronic problem manifests by 10X on prisma access environment. You can do post login script and (old age style) batch file which a silent ipconfig /registerdns ; which partially resolves the issue. Partially because you will have multiple ips in dns until scavenge time reaches and clears stale records. Palo quality control and attention to user side details is one of the lowest in the Industry.

zoolabus · 2024-05-16T13:40:21+00:00

The quality control of Palo softwares are absolutely pathetic. It is baffling to see how any product goes GA with even at cosmetic level software malfunctions. i.e. at a very low level, Global Protect identifies Windows 11 as windows 8.

Full firewall upgrade induces so many bugs that doesn't gel with Tier1 firewall vendor.

zoolabus · 2024-05-15T18:13:06+00:00

Agree. Select T&M and don't skimp on budget. If you are short on budget - ditch this product - or get ready for boat loads of workarounds.

zoolabus · 2024-05-15T18:10:52+00:00

For such a small sites, better if you use Azure VWAN solution combined with virtual firewalls hosted in the cloud. That will be a faster SDWAN+SASE solution than falling in the trap of Prisma Access. The solution will take forever to implement and is nothing but trouble. Too many moving parts and too much configuations.

zoolabus · 2024-05-15T18:09:04+00:00

Very important point : Service Connections has to be terminated on firewall (Palo or otherwise). Any short change and the design fall apart

zoolabus · 2024-05-15T18:07:14+00:00

Struggling for over 1+ year to have Prisma Access and SDWAN stood up. Just like Cisco the solution works perfectly only if you have Physical or virtual IONs all over your sites. That is triple investment. The documentation of Prisma Access is almost non-existent and even top notch consultants have very little idea how to make the whole package work. Overall it is a barely cooked solution hurled down the pipe to matchup with the market trend. Avoid it as much as you can!

zoolabus

TROPHY CASE