topic Office 365 returning 0 indicators in General Topics

Office 365 returning 0 indicators

Josephmitchell — Mon, 05 Nov 2018 16:34:12 GMT

I just noticed my Office 365 indicators are reporting zero for all Office 365. I originally installed 0.9.46 and it had been working great for a few months. After I noticed this I figured it had something to do with MS change from xml to json. My Palo Alto firewalls point to October 11th as the last time they saw a valid EDL. I upgraded Minemeld to 0.9.50 and still have the same issue. The builtin dsheild and spamhaus are still working. The only thing I added to the base install were the Office 365 components.

Any help or suggestions would be great.

Re: Office 365 returning 0 indicators

xhoms — Mon, 05 Nov 2018 16:38:04 GMT

Hi @Josephmitchell,

with the new MineMeld version (0.9.50) new nodes were delivered. You must replace the old configuration with the new one (follow instructions at https://live.paloaltonetworks.com/t5/MineMeld-Articles/How-to-Safely-Enable-access-to-Office-365-using-MineMeld-Updated/ta-p/224148)

Re: Office 365 returning 0 indicators

Josephmitchell — Mon, 05 Nov 2018 16:46:50 GMT

Thanks for that input ... that seems to have resolved my situation. Now I need to go back to my PAs and change the URL they are checking!

Re: Office 365 returning 0 indicators

lmori — Mon, 05 Nov 2018 16:48:09 GMT

Hi @Josephmitchell,

you can also connect the Miners to the old O365 Processors. This way the EDL URLs will stay the same.