topic New Crypto mining URL category in General Topics

New Crypto mining URL category

JacobHusted — Wed, 14 Feb 2018 09:59:29 GMT

Any plan from Palo Alto to create a new URL filter category for Crypto mining ?

Re: New Crypto mining URL category

reaper — Wed, 14 Feb 2018 10:36:48 GMT

I wrote something about that: https://live.paloaltonetworks.com/t5/Community-Blog/Unauthorized-Coin-Mining-in-the-Browser/ba-p/183457

Re: New Crypto mining URL category

JacobHusted — Wed, 14 Feb 2018 11:19:02 GMT

Could Palo Alto Traps be used to block crypto mining ?

And will we see a Palo Alto URL category for crypto mining ?

Re: New Crypto mining URL category

Remo — Wed, 14 Feb 2018 11:46:02 GMT

@JacobHustedwrote:
Could Palo Alto Traps be used to block crypto mining ?

Probably not. At least not yet, as this crypto mining is not a threat in the classical way. It does not really harm your computer as it "only" comsumes ressources.

@JacobHustedwrote:
And will we see a Palo Alto URL category for crypto mining ?

You can simply block the following threat ID's (Requires Threat Prevention Subscription):

18007
18010
11850

Re: New Crypto mining URL category

jhopple — Fri, 02 Mar 2018 09:07:34 GMT

@Remo the recommendation to "simply block" those three Threat IDs is somewhat misleading and subject to misinterpretation. Your response makes it sound like blocking those three Threat IDs would address any crypto mining concerns. However, the IDs referenced are only applicable to CoinHive. While those IDs are relevant, especially in regards to the post by @reaper , they do not really address the question of "will we see a Palo Alto URL category for crypto mining ?" which technically extends to mining pools and any other site dedicated to mining (exchanges, how tos, etc).

Re: New Crypto mining URL category

Remo — Sun, 04 Mar 2018 07:51:58 GMT

Hi @jhopple

You're right, this does not answer your question. It's only a tiny part of addressing this.

So the more correct answer is: In general for new features, you have to ask your local paloalto sales team. If there are no plans for such a category you could also let them ceate a feature request. But here in the public community you won't got official answers about planned features.