Resolution
Enable “Save User Credentials” in client authentication settings under GlobalProtect Portal GUI: Network > GlobalProtect > Portals> (portal name) > Agent > (agent name) > Authentication. So user only needs to enter their username/password combination one time.
Author: Bob Lin
How to Install an SSL Certificate on Palo Alto Networks
After receiving CA validates SSL files, you can continue with the SSL installation on Palo Alto Firewall.
Step 1: Prepare your SSL files
To install SSL files on Palo Alto, you have to merge them into a single file. Here’s how.
- Open your primary SSL Certificate (.crt file with randomized name) and copy the full text including —–BEGIN CERTIFICATE—– and —– END CERTIFICATE —–tags
2. Create a new plain text document and paste the certificate’s content. Make sure you haven’t left any white spaces or extra line breaks.
3. Now, open your intermediate certificate (gd_bundle.crt or similar) and copy-paste its contents in the new plain text document you’ve just created, right under your primary SSL Certificate.
Note: If you receive more than one intermediate certificate from your CA, place the second intermediate cert under the first.
4. Your new plain text Notepad document should look like this:
—– BEGIN CERTIFICATE —–
(SSL Certificate encrypted data)
—– END CERTIFICATE —–
—– BEGIN CERTIFICATE —–
(Intermediate CA encrypted data)
—– END CERTIFICATE —–
5. Save your Notepad SSL file containing primary and intermediate certificates with the same name as your CSR file. Make sure it has the .cer extension.
Step 2: Import your SSL Certificate
- Log into your Palo Network dashboard
- Select the Device tab, and in the left section expand the Certificate Management tree and click on Certificates.
- At the bottom of the screen, click Import.
4. In the Import Certificate window, next to Certificate Name, enter the name of your SSL Certificate. It must be the same as the CSR name.
5. Click Browse to locate your .cer SSL file. Don’t check the private key related radio buttons.
6. Click OK.
Step 3: Test your SSL
Option 1: Login the SSL website.
Option 2: After you have installed your SSL certificate, you can use GoDaddy SSL checker test tool.
How to istall WeChat on PC
Option 1: Download WeChat PC via Official Website
Step 1: Visit the official website of WeChat download.
Step 2: To download WeChat for Windows 10/11, click the Download button to get the WeChatSetup.exe file, which should be located in download folder.
3. After getting WeChat download for Windows 10, double-click on the .exe file and follow the on-screen instructions to install it on your PC.
Option 2: WeChat Download PC via Windows 10/11 Microsoft Store
You can download and install WeChat for Windows 10/11 via the built-in Microsoft Store.
Step 1: Open Microsoft Store on your PC.
Step 2: Type WeChat for Windows to the search field and press Enter. Then, click the Install button to start downloading and installing.
3. After installing the PC version of WeChat, open the WeChat app on your mobile phone, use the mobile app to scan the QR code on the PC screen, and confirm the login. Then, you can send messages, share files, and make a voice/video call on your Windows 10 computer.
How to Export/Import Outlook Rules
Step 1: Export Rules
1. From the Home screen in Outlook, navigate to Rules > Manage Rules & Alerts
2. Select Options > Export Rules
3. Choose your Desktop as the location to save the rules export and name it “OutlookRules” then click Save.
4. You can close the Options window and you should see a file called OutlookRules.rwz on your desktop.
Step 2: Import Rules
Important note: this only needs to be done if Rules are not present after the migration.
1. From the Home screen in Outlook, navigate to Rules > Manage Rules & Alerts
2. Select Options > Import Rules
3. Browse to your Desktop and choose “OutlookRules.rwz” file then click Open. Close the Options window and you should now see the rules that have been imported.
How to migrate Outlook Signatures
1. Open a previously sent email from your sent items folder and copy the signature from the bottom of your email. For example
Bob Lin, Chicagotech-MVP, MCSE & CNE
Data recovery, Windows OS Recovery, Networking, and Computer Troubleshooting on
http://www.ChicagoTech.net
How to Install and Configure Windows, VMware, Virtualization and Cisco on
http://www.HowToNetworking.com
2. Open a New Email as if you are sending an email. Double click on Message and then Signature > Signatures
3. Select New and create a name for your signature. Paste signature in the Edit Signature window and hit Save. Repeat if you have different signatures for New Messages and Replies/Forwards.
4. Select appropriate signature for New message or Replies/Forwards and hit OK and close the new message window.
Any New Message or Reply/Forward should now have your newly created signatures.
How to use Microsoft Quick Assist for remote connection
With Windows Quick Assist, you can establish a remote connection to a PC running Windows. Here is how.
To help someone you know by using Quick Assist
- Select Start , enter Quick Assist, then select it in the list of results (or press the Windows key + Ctrl + Q). Open Quick Assist
2. Select Help someone.
3. Share the 6-digit code with the person you’re helping.
4. The person who needs help enters and then click on Submit.
5. When you’re connected and helping someone, you can use different tools in Quick Assist if you like, such as a laser pointer, annotation, chat for typing messages, and more.
6. If you’d like to request full control of their PC, select Request control, then wait for them to allow it.
7. When you’re done helping them, select Leave.
To get help from someone you trust using Quick Assist
- Select Start , enter Quick Assist, then select it in the list of results (or press the Windows key + Ctrl + Q). Open Quick Assist
- In the Code from assistant box, enter the 6-digit code they gave you, then select Submit.
- To allow the connection and start sharing your screen, select Allow.
- When someone is helping you, they might request full control of your PC. If you want to allow it, select Allow.
To stop allowing full control, select Cancel control. - When you’re done getting help, select Leave.
Can palo alto firewall do balance the network traffic?
Yes, Palo Alto Networks firewalls have the capability to balance network traffic across multiple Internet Service Provider (ISP) connections. This feature is known as ISP link balancing or WAN link balancing.
Palo Alto firewalls support the use of multiple ISP connections simultaneously and can intelligently distribute network traffic across those connections. This helps optimize bandwidth utilization, provide redundancy, and improve overall network performance.
To configure ISP link balancing on a Palo Alto firewall, you typically need to follow these steps:
- Set up multiple ISP connections: Connect each ISP connection to the appropriate interface on the firewall.
- Configure interface and IP addressing: Configure the firewall interfaces and assign IP addresses to them, ensuring each ISP connection is properly recognized.
- Configure ISP link monitoring: Specify the monitoring method to determine the availability and health of each ISP link. The firewall can use techniques such as ICMP ping, TCP/UDP port monitoring, or session monitoring to check the link status.
- Define ISP link profiles: Create ISP link profiles that define the characteristics and parameters of each ISP connection, such as bandwidth, quality, and priority.
- Configure ISP redundancy and load balancing: Define the desired load balancing algorithm and failover behavior. The firewall can distribute traffic based on factors like link availability, link quality, or traffic volume.
- Apply policies: Create or modify security policies to control how traffic is handled by the firewall. You can specify the desired ISP link profile or load balancing behavior for different types of traffic or applications.
By configuring ISP link balancing on your Palo Alto firewall, you can effectively distribute network traffic across multiple ISPs, improving overall performance, availability, and resilience of your network connectivity.
Can we increase the Internet speed by having two ISPs?
In general, having two ISPs (Internet Service Providers) does not automatically increase your internet speed beyond the maximum bandwidth provided by each ISP individually. Each ISP provides a specific speed, and you cannot combine them directly to achieve a higher total speed.
However, there are certain routers or devices that can utilize both ISPs simultaneously to distribute network traffic intelligently. These devices are known as dual-WAN routers or multi-WAN routers. They allow you to connect multiple internet connections and balance the network traffic across them.
With a dual-WAN router, you can allocate different types of traffic to different ISPs or use both connections simultaneously to distribute the load. This can provide benefits such as load balancing, increased network availability, and improved performance for multiple users or applications.
When using a dual-WAN router, it’s important to note that a single connection or download cannot exceed the maximum bandwidth of a single ISP. However, the router can intelligently distribute traffic across the available connections, potentially providing improved overall performance and responsiveness.
It’s worth mentioning that the effectiveness of a dual-WAN router depends on various factors, including the router’s capabilities, the specific configuration, and the type of traffic being handled. Additionally, network performance can still be subject to the limitations and variations of each ISP.
Before investing in a dual-WAN router, carefully research and consider the specific features, compatibility with your ISPs, and user reviews to ensure it meets your requirements.
Import Users from CSV on DUO
To add users to Duo Admin Panel, you can use Duo’s Import Users tool imports user information from a properly formatted comma-separated values (CSV) file. CSV import values can include username aliases, email addresses, full names, groups, notes, and multiple phones or mobile devices. Duo’s Import Users tool differs from the Bulk Enroll Users tool, in that those entries are initially limited to username and email address, and those users cannot be managed in Duo until they’ve completed self-enrollment.
The CSV file can include multiple data fields for each Duo user.
Allowed Fields
The fields allowed in this CSV file are:
username
realname
alias
[1…8]
email
phone
[1…n]
platform
[1…n]
group
[1…n]
status
notes
token
[1…n]
type
[1…n]
Only the username
field is mandatory; all other fields are optional, and can be arranged in any order (as shown in the CSV File Format section below). Duo usernames and username aliases should have unique values for each user.
CSV File Format
The first line of the CSV file (the header) specifies the fields to import. For example:
username,realname,alias1,email,status,phone1,platform1,phone2,group1,group2
Here are some examples of possible user entries in a CSV file using the example header. Notice that when there is no value for a field, the field is left blank.
username,realname,alias1,alias2,email,status,phone1,platform1,phone2,platform2,group1,group2,notes,token1,type1 jason,Jason Liu,jason@example.com,smithj3,jason@example.com,active,734-555-1234,iphone,734-555-3232,mobile,StdUsers,,,, sally,Sally Jones,sally@example.com,joness5,sally@example.com,disabled,(734)-555-1235,android,(734)-555-4343,landline,StdUsers,,activate account after Dec 4,, jack,Jack Cruz,jack@example.com,,jack@example.com,bypass,+17345554322,smartphone,,,StdUsers,NetAdmins,,101222,h6 sarah,Sarah James,sarah@example.com,,sarah@example.com,active,(734) 555-2235,iphone,(734) 555-3302 x3243,landline,StdUsers,,,, bob,Bob Rogers,bob@example.com,rogersb,bob@example.com,active,734 555 3444,landline,734 223 9836,smartphone,StdUsers,,,, mary,,,,,delete,,,,,,,,,
Here is the step by step how to importing Users
- Log in to the Duo Admin Panel and click Users in the left sidebar. Click the Import Users
2. Click the Choose File button, browse to your CSV file.
3. Click Upload to start the import process.
If the CSV file contains any errors, the import attempt fails and you are shown a red error message like the one below. If you see an error message, then the attempt has failed and none of your users were imported. Correct the indicated errors and try the import again.
4. After the CSV import is finished, a success message at the top of the Duo Admin Panel reports the results:
5. You should those usess.
6. Now, you need to send the new users an activation link.
How to Schedule a meeting in Teams
When you schedule a meeting in Outlook, it’ll show up in Teams, and vice versa. Note: Up to 1,000 invitees can join a Teams meeting and interact by using chat, audio, and video.
Schedule a meeting
There are several ways to schedule a meeting in Teams:
- Select Schedule a meeting in a one-on-one or a group chat (below the box where you type a new message) to book a meeting with the people in the chat. You can’t schedule a meeting from a meeting chat.
- Go to Calendar on the left side of the app and select New meeting in the top right corner.
- Select a range of time in the calendar. A scheduling form will pop open.
Here is how to use Calendar to schedule a meeting.
- Click on Calendar on the left side of the app and select New meeting in the top right corner.
2. The scheduling form is where you’ll give your meeting a title, invite people, and add meeting details. Use the Scheduling Assistant to find a time that works for everyone.
3. The Teams’ meeting has been added to the Calendars.