<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: how to block malicious Attack on server in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/how-to-block-malicious-attack-on-server/m-p/392500#M90906</link>
    <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/164478"&gt;@jalorente&lt;/a&gt;,&lt;/P&gt;
&lt;P&gt;It appears in your logs that this attack was identified on 127.0.0.1, which is your localhost address. The firewall isn't going to see this traffic as it's not actually leaving your host and traversing the firewall. If this threat actually traverses your firewall and you have visibility into the traffic, it should be detected under threat ID&amp;nbsp;&lt;SPAN&gt;57897&lt;/SPAN&gt;&lt;/P&gt;</description>
    <pubDate>Sun, 21 Mar 2021 02:54:52 GMT</pubDate>
    <dc:creator>BPry</dc:creator>
    <dc:date>2021-03-21T02:54:52Z</dc:date>
    <item>
      <title>how to block malicious Attack on server</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/how-to-block-malicious-attack-on-server/m-p/392426#M90892</link>
      <description>&lt;P&gt;Hi All,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Good day!&lt;/P&gt;&lt;P&gt;I'm trying to block malicious attack on our server but no luck. Please see below attack i encountered on server.&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="jalorente_1-1616210194515.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/30450i47AE100B670B9217/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="jalorente_1-1616210194515.png" alt="jalorente_1-1616210194515.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="jalorente_2-1616210294296.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/30451iEF3EF77ED6822F3C/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="jalorente_2-1616210294296.png" alt="jalorente_2-1616210294296.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I've already create a policy for that attacked. I already set security profile for that specific servers.&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="jalorente_3-1616210430668.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/30452i8EA19BEFB594E9C5/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="jalorente_3-1616210430668.png" alt="jalorente_3-1616210430668.png" /&gt;&lt;/span&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="jalorente_4-1616210522914.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/30453i65BF0A022D91CFC8/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="jalorente_4-1616210522914.png" alt="jalorente_4-1616210522914.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;Also i already install the latest dynamics updates. I hope you can help me on my problem. Thanks in advance.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you and keep safe!&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;DIV class="mceNonEditable lia-copypaste-placeholder"&gt;&amp;nbsp;&lt;/DIV&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sat, 20 Mar 2021 03:24:27 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/how-to-block-malicious-attack-on-server/m-p/392426#M90892</guid>
      <dc:creator>jalorente</dc:creator>
      <dc:date>2021-03-20T03:24:27Z</dc:date>
    </item>
    <item>
      <title>Re: how to block malicious Attack on server</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/how-to-block-malicious-attack-on-server/m-p/392500#M90906</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/164478"&gt;@jalorente&lt;/a&gt;,&lt;/P&gt;
&lt;P&gt;It appears in your logs that this attack was identified on 127.0.0.1, which is your localhost address. The firewall isn't going to see this traffic as it's not actually leaving your host and traversing the firewall. If this threat actually traverses your firewall and you have visibility into the traffic, it should be detected under threat ID&amp;nbsp;&lt;SPAN&gt;57897&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Sun, 21 Mar 2021 02:54:52 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/how-to-block-malicious-attack-on-server/m-p/392500#M90906</guid>
      <dc:creator>BPry</dc:creator>
      <dc:date>2021-03-21T02:54:52Z</dc:date>
    </item>
  </channel>
</rss>

