- Видео 22
- Просмотров 49 063
TechFrapi
Добавлен 11 дек 2022
Making Tech and how-to videos related to Networks
Cisco
Palo Alto
Fortigate
AWS
Azure
EVE-NG
If you want specific video please let me know below the comments
Cisco
Palo Alto
Fortigate
AWS
Azure
EVE-NG
If you want specific video please let me know below the comments
Palo Alto Global Protect Internal Gateway User Mapping - SAML
Configure Global Protect internal Gateway using saml to authenticate
Video to configure Global Protect external gateway with Saml:
ruclips.net/video/qB6ESbVUY1I/видео.html
Video to configure Global Protect external gateway with Saml:
ruclips.net/video/qB6ESbVUY1I/видео.html
Просмотров: 1 850
Видео
Palo Alto Cloud Identity Engine Authentication Portal User Mapping
Просмотров 1,3 тыс.9 месяцев назад
Configure Cloud Identity Engine (CIE) Authentication Portal How to configure Cloud Identity Engine (CIE) : ruclips.net/video/-Hff4yjIO4U/видео.html Azure urls need for url categories learn.microsoft.com/en-us/azure/azure-portal/azure-portal-safelist-urls?tabs=public-cloud
Install Zabbix Appliance EVE-NG (2023)
Просмотров 4,6 тыс.Год назад
How to install Zabbix in EVE-NG gitlab.com/eve-ng-dev/templates gitlab.com/eve-ng-dev/icons zabbix.com/download_appliance
How to install Docker and Palo Alto Panhandler on Linux Ubuntu Server
Просмотров 238Год назад
This video shows how to install PA Panhandler on linux ubuntu server. You need to install Docker. Panhandler is a lightweight utility used to aggregate and view or load configuration templates. The primary focus is PAN-OS devices such as the NGFW or Panorama Install Docker docs.docker.com/engine/install/ubuntu/ Panhandler linux installation panhandler.readthedocs.io/en/master/running.html
How to install Palo Alto Panhandler on Windows
Просмотров 149Год назад
This video shows how to install PA Panhandler on windows. You need to install WSL 2 and Docker. Panhandler is a lightweight utility used to aggregate and view or load configuration templates. The primary focus is PAN-OS devices such as the NGFW or Panorama Install WSL 2 on windows ruclips.net/video/gAEASrvtKyI/видео.html Panhandler windows installation panhandler.readthedocs.io/en/master/runnin...
Install WSL 2 on windows (2023)
Просмотров 1,4 тыс.Год назад
In this video will show you how to install WSL on windows and using ubuntu and kali linux. Links you can follow if you need more info or need to troubleshot : learn.microsoft.com/en-us/windows/wsl/install learn.microsoft.com/en-us/windows/wsl/install-manual
Palo Alto API with Postman Get configuration (Part4)
Просмотров 488Год назад
Get Palo Alto firewall configuration for backup using API with Postman To get Started with Postman and rest API please watch the first video ruclips.net/video/98w833RGqmA/видео.html
Palo Alto Rest API with Postman Create an Address Group Object (Part3)
Просмотров 741Год назад
Get and Post Address Group object on Palo Alto firewall using Rest API with Postman To get Started with Postman and rest API please watch the first video ruclips.net/video/98w833RGqmA/видео.html
Palo Alto Rest API with Postman Create an Address Object (Part2)
Просмотров 2,2 тыс.Год назад
Get and Post Address object on Palo Alto firewall using Rest API with Postman To get Started with Postman and rest API please watch the first video ruclips.net/video/98w833RGqmA/видео.html
Palo Alto Rest API with Postman getting the api key (Part1)
Просмотров 4,6 тыс.Год назад
This video will show how to start using postman to get Rest API call with Palo Alto Firewall. Get the api key
IPsec Site to Site VPN between Palo Alto On-premises and AWS over BGP
Просмотров 4,6 тыс.Год назад
Configure IPsec VPN over BGP between Palo Alto and AWS. Testing with Palo Alto on eve-ng and ubuntu server instance in AWS
Palo Alto BGP over IPsec Route Based VPN Tunnel
Просмотров 5 тыс.Год назад
Configure Dynamic Routing protocol BGP over Site to Site IPsec Route Based VPN tunnel. If you want to learn how to configure Site to Site VPN tunnel watch first: ruclips.net/video/GlNc3uJ8N0Y/видео.html
Palo Alto Site to Site Route Based VPN IPsec with Static Routing
Просмотров 2,2 тыс.Год назад
Configure Route Based IPsec vpn on palo alto with static routing
Eve-ng Cisco Router CSR 1000 ping issue RESOLVED
Просмотров 954Год назад
Fix eve-ng cisco router csr1000 ping doesn't work to or from another devices
Configure Palo Alto High Availability (HA) Dual ISP failover
Просмотров 2,8 тыс.Год назад
High Availability configuration on Palo Alto plus failover with two isp and two virtual routers
Palo Alto Path monitoring failover with Dual ISPs
Просмотров 3,8 тыс.Год назад
Palo Alto Path monitoring failover with Dual ISPs
Palo Alto Networks Global Protect VPN with Azure SAML
Просмотров 2,5 тыс.Год назад
Palo Alto Networks Global Protect VPN with Azure SAML
Configure Palo Alto Global Protect VPN
Просмотров 1 тыс.Год назад
Configure Palo Alto Global Protect VPN
Configure Palo Alto Layer 3 interface to get access to internet
Просмотров 244Год назад
Configure Palo Alto Layer 3 interface to get access to internet
Configure Palo Alto Cloud Identity Engine authentication with Azure Saml to connect to GP VPN
Просмотров 4,6 тыс.Год назад
Configure Palo Alto Cloud Identity Engine authentication with Azure Saml to connect to GP VPN
Can we configure dual isps over 1 VR? And can we configure path monitoring only at One Site, mean configure path monitoring at Site-A for both ISP and Site B no need to configure path monitoring like SiteA, will traffic fail over when ISP1 is down?
yes you can
Thank for this video. Seemed precise and clear.
Thanks
good video thank you
Thanks
Thank you! Very simply understandable content for everyone.
Glad it was helpful!
Been wtching your video, but it´s not working
what is the problem
Holy Shiettttt...... Thank you. Up vote for sure. I NATed the VM , I Brdged the VM i DHCPed the VM i STATICed the VM I... I Turned off my firewall, i disconected from my VPN then started to loose my mind .... and then I found this video... Sometimes you just gotta get lucky
I have spent a lot of time to fix it for my self first time, thats why made the video. Happy it helps
5:02 Is the source ip configuration at Internal Gateway mandatory? Or i can leave it to default?
you should add it
Exactly that's what I was looking for. thanks!!
Glad I could help!
Thank you very much!
You're welcome!
Can you do any example between Azure & Palo Alto, with 2 VPN's IPSec Active/Active with Gateway BGP? Please
will try to make one, once i have a bit of free time
help me how to add object address to address group (exist) with xml and url ? i'm try to use PUT on it but not work. i dont know what xml script add and url? Thanks
do you want to use xml api or rest api
Great tutorial, thank you! Are you familiar with same process for getting api key for SCM?
i havent done it, but once you found the api, which should be on the documentation than you can test it with postman
why we need additional rule like ike and ipsec, because while we configure the normal site2site , those rule doesn't need it
Which additional rules exactly
ohh no when I run zabbix, it turns off after only 1 2 seconds. Can you help me fix it?
you need increase memory and hard disk in eve vmare or adjust RAM and CPU parameters to be smaller than eve vmware
did you fix it
Does your zabbix.yml file have support zabbix 6.4 (6.4.13) ?
I had this downloaded from the original website. If they supported don't know to be honest
Hi, I am not receiving response to get API key. it shows Could not send request "Error: connection request timed out". Kindly help.
Easies way to test is to use the browser {ip address}/api/?type=keygen&user={your username}&password={ your password} Just replace with your username password and ip
very useful video, thank you very much for your help
Glad it helped
do you need separate virtual routers or can you use a single virtual router ?
In this case i have use separate for this design, but you can use same VR. it will be different. What do you try to achieve
thank you for the video -- if a static route is being monitored will it show in the table if the monitor condition is triggered ?
If failover happened it will remove it from the table
hi can u help me? i cant access the zabbix gui... it says cant reach page
Can you access over the terminal, if yes make sure when you use browser is over http not https
Thank you!!!
You're welcome!
How did you configure a HIP check to prevent a client is hitting the identification timeout?
I havent configured a hip, but if you want something specific, i can have a look for you
Thank you for this video. It is very helpful. However; the video quality is very poor.
Thank you for feedback. Make sure you choose full hd, as sometimes videos start in lower resolution
Thanks so much for this video. It helped me learn to use Postman and Palo restapi. Couple of issue I experienced during my workout. the .restapi-doc url seems to deliver the page but then go unresponsive. This was the case with most of the browsers. I couldn't use the documentation. But I used the command from your example and it worked! Thanks and grateful..
Great to hear it helped. Bear in mind to be able to use documentation the firewall should be online, if you turn it off won't work
Great Video, thanks 🙂
Glad you liked it!
Thank you so much!
You're welcome!
thank you !, this helped me bro
Glad it helped
This was great men thank you
You're very welcome
just resolved my life, I was chasing for it so many time already, I now is fixed
Glad you fixed it
Hi iam getting the database error local host YES type of error do you know how to fix this one i am using the latest zabbix 6.4.7 version
Never saw that problem to be honest, i know some people have issues with the latest image
great work, well explained . Thank you
Glad you liked it
it worked, thanks
Glad it helped
Thanks man
Any time
Best tutorial
Thanks
Would you know how to give one tunnel priority over the other? (active/standby) in Palo? I see you configured the tunnel monitor
AWS does asymmetric routing and is the recommended way of doing it, but you should be able to achieve it over the BGP to preferer one tunnel over the other
Awesome video
Glad you enjoyed it
Can i use eveng routers and switches to monitoring with this?
Yes you can
how do we create a ticket to disable vpn?? please reply
Can you specify what exactly what you want to do
@@techfrapi want a ticket number to be generated with global protect vpn. Request number and duration should be provided using API.
@@techfrapi Kindly help
Awesome!!!Thanks!
You're welcome!
@@techfrapi Hi, I am not receiving response to get API key. it shows Could not send request "Error: connection request timedout". Kindly help.
For CIE we don't require SAML identity provider
What do you use
i want to work with nagios,is it the same process.if so can u please give us a demo and Thank You so much
I will check it
I followed the process end to end. But Zabbix NODE is not powering on, any suggestions ? I tried multiple times but no luck.
If you tried version 6.4.4 might not work. Try the one i use drive.google.com/drive/folders/14yvkSCE_T-EkaE6xGIBu-BMHc9HML5O5
Hello friend, I have tried several times to install Zabbix in EVE-NG, I have tried with version 6.4.4 and 6.0.19 but my virtual machine does not recognize it, I have done your steps and also those of the official page of EVE-NG but still gives me the same problem. What would you recommend me to do? since the template file and the icon is installed correctly. Greetings from Guatemala.
Hi, Some people said before that 6.4.4 doesn't work for some reason. I have uploaded my image you can downloaded and try with it, if still doesnt work paste your error drive.google.com/drive/folders/14yvkSCE_T-EkaE6xGIBu-BMHc9HML5O5
@@techfrapi thank you , because i don't used your zabbix.yml file for zabbix 6.4.13
Thanks man , i have somme problem ,can you help me, the eth1 interface does not take an ip address via dhcp, how can we configure the static ip address?
If you attach a windows pc to the same lab, is it receive ip address by dhcp
hello, you have to connect it to managment cloud. and for eve you have to change network adapter to Vmnet8 for NAT
Bro, i have one more question))) if I have more than 1 NGF Palo Alto with different configs, can i create/use different API on Azure for each NGF? because 1 of them have redirect port forward from 443 to 7755 to portal/gateway, another work with 443... what you recomend to do? separate api for each hardware nff or use one universal api for all?
It work’s also with redirect port, with the same api & profile👍 just test it today.
One API is fine, i have done many firewalls with one, as i need all to have access to same Azure AD
Thanks man very helpful
Glad it helped
Outstanding
Thanks
It works 😊 i did it today! Thanks a lot for you!
I am glad you manage it to work, Good job
what was the issue
@@techfrapi the issue was that authentication couldn’t find users in azure profile I added like domain \ username, it can understand it after I added it like user @ domainname .
@@techfrapi because I didn’t select all users, I added some for testing manually
i have success log viewer on hub portall and Authentification error page inforrmation by firewall after successfully sign in with multifactor auth(((
check if you have multifactor enabled in Azure
Did you install and use the Cloud Identity Agent on windows machine? or it must work without installed agent?
You dont need to install CIE on your pc