topic Re: Block a specific spyware in General Topics https://live.paloaltonetworks.com/t5/general-topics/block-a-specific-spyware/m-p/37208#M27298 <HTML><HEAD></HEAD><BODY><P>Hello TSPI,</P><P></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;">Are you talking about threat ID-12652 "Mariposa Command and Control" as mentioned below..?</SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;"><IMG alt="mariposa.JPG" class="image-0 jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/13851_mariposa.JPG" style="height: 386px; width: 620px;" /><BR /></SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;">If so,then it should drop all packet for that session. The default action of this spyware is set to "drop-all-packet". I would request you confirm, whether traffic is passing through the correct policy, where you have configured the anti-spyware profile.</SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;"><BR /></SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;"><BR /></SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;">Thanks<BR /></SPAN></P></BODY></HTML> Tue, 10 Jun 2014 03:22:12 GMT HULK 2014-06-10T03:22:12Z Block a specific spyware https://live.paloaltonetworks.com/t5/general-topics/block-a-specific-spyware/m-p/37207#M27297 <HTML><HEAD></HEAD><BODY><P>Hi All,</P><P></P><P>I just want to ask how can we do a spyware blocking. We want to block mariposa spyware but i tried to configure the policy but it does not deny it.</P><P></P><P>Thanks.</P></BODY></HTML> Tue, 10 Jun 2014 01:41:12 GMT https://live.paloaltonetworks.com/t5/general-topics/block-a-specific-spyware/m-p/37207#M27297 TSPI 2014-06-10T01:41:12Z Re: Block a specific spyware https://live.paloaltonetworks.com/t5/general-topics/block-a-specific-spyware/m-p/37208#M27298 <HTML><HEAD></HEAD><BODY><P>Hello TSPI,</P><P></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;">Are you talking about threat ID-12652 "Mariposa Command and Control" as mentioned below..?</SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;"><IMG alt="mariposa.JPG" class="image-0 jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/13851_mariposa.JPG" style="height: 386px; width: 620px;" /><BR /></SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;">If so,then it should drop all packet for that session. The default action of this spyware is set to "drop-all-packet". I would request you confirm, whether traffic is passing through the correct policy, where you have configured the anti-spyware profile.</SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;"><BR /></SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;"><BR /></SPAN></P><P><SPAN style="font-size: 10pt; line-height: 1.5em;">Thanks<BR /></SPAN></P></BODY></HTML> Tue, 10 Jun 2014 03:22:12 GMT https://live.paloaltonetworks.com/t5/general-topics/block-a-specific-spyware/m-p/37208#M27298 HULK 2014-06-10T03:22:12Z