topic Re: Simply correlate theats and URL's in General Topics

Simply correlate theats and URL's

asecus — Wed, 24 Feb 2010 15:08:30 GMT

I'm surfing throgh differents threats (virus,spyware,etc) in the monitor windows and in some cases I find out in the other filed the URL wher it came from otherwise moslty of the time I just see the source/destination IP.

My question: is possible to correlate URL and threath ? If yes how aprt from the timestamp combinated with sessionid ?

Thanks Boris

Re: Simply correlate theats and URL's

mjacobsen — Wed, 24 Feb 2010 15:18:12 GMT

The manual correlation method you mentioned is the only option in the current software. We have a feature coming in PAN-OS 3.1 that will automatically correlate and show all related logs when you view the log details. This will show you the complete history of a session in a single view.

Mike

Re: Simply correlate theats and URL's

asecus — Wed, 24 Feb 2010 15:43:06 GMT

I'm also running 3.1 beta (3.1.0-b25) and I can't find this feature, can you help me ?

Thanks

Re: Simply correlate theats and URL's

mjacobsen — Wed, 24 Feb 2010 15:53:39 GMT

Clicking the Log Details link on the far right of a row in the log viewer will bring up the details of the log as wells as a new table showing all of the associated logs. The layout in b25 is not quite right and the data is probably off of the screen at the bottom.

Mike