Hey everyone, Here are my articles about creating Palo Alto signatures that anyone in the community could find useful: How to Write Palo Alto Networks Custom Vulnerability and Application Signatures with Examples LIVEcommunity - Rate-Limiting File Uploads with Palo Alto Networks Custom Signatures - LIVEcommunity - 1239571 LIVEcommunity -...
Hello Livecomm, I am working on the XSIAM platform and I want to provide a default layout for cases that are manually opened. The classic fields that contain this info such as _product and tags cannot be filtered on. Does anyone have a solution for this? Many thanks, MSysec Cortex XSIAM
How are people policing logins to Chatgpt for enterprise only logins?https://help.zscaler.com/zia/adding-tenant-profilesZscaler does it. Palo does it for microsoft.....How are people doing this with decryption and Palos native app id, NOT the ACE subscription?Is this possible?
In the last couple of days we've been getting reports from multiple users that they are being blocked from downloading .xlsx files from a cloud service. I can see that there are multiple entries in the Data Filtering log for each file, and then final one is showing a Threat ID of BIN file and being denied. Anyone seen anything similar?
We have created Security Policy with following criteria Source: User Destination Address : Any, URL Category: Worldwide URL, Tenant Restriction: Dropbox, Application: Any, Service: Application Default, and Action: Allow In This Scenario Any Traffic, Worldwide URL and Dropbox will be allowed or how it is?
Running show system resources, I see multiple instances of a process called 'touch' showing in a zombie state. I haven't been able to find anything about this process or what it does. Does anyone have any information on this? bmax@fw-ab-a(active)> show system resources top - 10:19:01 up 289 days, 14:35, 1 user, load average: 1.08, 0.84, 0....
I’m confused because there seems to be a contradiction in the documentation regarding the choice of AWS instance type for deploying a VM-300 using NGFW Software Credits.Could you clarify which AWS instance type meets the requirements for running VM-300? ■VM-Series Performance & Capacity on Public Clouds – VM-Series on Amazon Web Services Per...
Hello,just need to get confirmed - that make an image of a physical PA-3220 is not doable !I have had questions about that - but my common sense says that cannot bed done - or am i wrong ?
How I should download Pan OS for GNS3 ?
Hi, I'd like to list the actual content (e.g. IP addresses) of a dynamic address group (e.g. cisco plugin for Cisco ACI). However, I did not find an API call (neither REST nor XML) to achieve this purpose. Regards Tilmann
Hello, we need the codes and numbers for above mentioned Power Supply. Is there a general doc,where all PAN product are included.Older links to such a doc failed. Many thanks.
Hello, I am trying to wrap my head around the PA deployment in azure using PA Series. I am basically following this video on setting up 2 zones, 2 Virtual routers, and route rules.In my setup the two spoke vnets have UDR with 0.0.0.0/0 route to the trust interface of the PANFW. I created two VRs and associated with the Interfaces. I have also a...
I have 4 portals and 4 gateways (4 different PA fw/vm ) of a GlobalProtect. PA is integrated with azure (an azure app per each gateway).I added one more new portal and one more new subnet to the one of the existing gateways, a new dns a-record and a new azure app. ISSUE: Clients can't connect to this portal, it's getting stuck after connection a...
Hello Team, I have two ISP for site A and site B. we have configured tunnel.1,2,3,4. for all the tunnels i configured tunnel monitoring for failover. My primary tunnel is up and working fine. However, all the backup tunnels are down the tunnel status are showing red. anyone tell me is this expected?
