topic Massive alets from PAN NGFW Source in Next-Generation Firewall Discussions

Massive alets from PAN NGFW Source

Y.Zalsov — Mon, 08 Jul 2024 09:40:21 GMT

Hello community,

I need your help,
At my last 30 days im getting alot of alerts to my XSIEM from PAN NGFW source about Prevented action from bad URL
the category is (Spyware Detected via Anti-Spyware profile)

After block Url's and Domain and added them to Black List, i still get the same Url and domain trigger agine.

Someone have idea what to do?

Re: Massive alets from PAN NGFW Source

orkhan.hajizada — Tue, 16 Jul 2024 11:24:29 GMT

Did you verify that the URLs and domains are completely and correctly added to the blacklist? Ensure there are no typos or incorrect entries.

Re: Massive alets from PAN NGFW Source

Y.Zalsov — Tue, 16 Jul 2024 12:29:02 GMT

Hello Orkhan,
Yes i added them to my BlackList and still i get alert from theme its show me the category: Spyware Detected via Anti-Spyware profile.
I need find way how to make this rule stop alerts.