<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Blocked traffic after Content Upgrade 289 in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/blocked-traffic-after-content-upgrade-289/m-p/23395#M17052</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;World of Palo,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;We have just seen an increase in blocked traffic (thus broken apps) after upgrading app content from V288 to V289.&amp;nbsp; The funy thing is its all low risk Microsoft LAN stuff.&amp;nbsp; Does anyone know if PAN have changed the action and not the signiture for 30858 - Windows Local Security Architect LsarQueryInformationPolicy from alert to drop (as in 289)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Thu, 26 Jan 2012 18:20:28 GMT</pubDate>
    <dc:creator>djmac</dc:creator>
    <dc:date>2012-01-26T18:20:28Z</dc:date>
    <item>
      <title>Blocked traffic after Content Upgrade 289</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/blocked-traffic-after-content-upgrade-289/m-p/23395#M17052</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;World of Palo,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;We have just seen an increase in blocked traffic (thus broken apps) after upgrading app content from V288 to V289.&amp;nbsp; The funy thing is its all low risk Microsoft LAN stuff.&amp;nbsp; Does anyone know if PAN have changed the action and not the signiture for 30858 - Windows Local Security Architect LsarQueryInformationPolicy from alert to drop (as in 289)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 26 Jan 2012 18:20:28 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/blocked-traffic-after-content-upgrade-289/m-p/23395#M17052</guid>
      <dc:creator>djmac</dc:creator>
      <dc:date>2012-01-26T18:20:28Z</dc:date>
    </item>
    <item>
      <title>Re: Blocked traffic after Content Upgrade 289</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/blocked-traffic-after-content-upgrade-289/m-p/23396#M17053</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;It does appear that the action was changed to "drop-reset" in this content release.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I found this by looking at the release notes for that particular content version which can be found on our support portal -&amp;gt; Dynamic Updates section.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks,&lt;BR /&gt;&lt;BR /&gt;Jason &lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Sun, 05 Feb 2012 02:48:08 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/blocked-traffic-after-content-upgrade-289/m-p/23396#M17053</guid>
      <dc:creator>jseals</dc:creator>
      <dc:date>2012-02-05T02:48:08Z</dc:date>
    </item>
  </channel>
</rss>

