topic DAG is not working in General Topics

DAG is not working

minow — Sat, 10 Jun 2017 19:33:41 GMT

hey

i have started playing arround with MineWeld.

i am testing a solution for a customer to update DynamicObject / Block lists on the PA to be used by the SOC team.

i have created a IPv4 List and connected it directly to a DagPusher node.

but when i add an indicator to the miner i do not see it on the PA dynamic group.

this is what i see on MineWeld

This is the config , i assume here that the TAG is the TAG on the PA that the dynamic group should catch the objects, is it right ?

this is the configured dynamyc group

admin@PA-LAB> show object dynamic-address-group all

Dynamic address groups in vsys vsys1:
----------------------------------------------------

----------------defined in vsys --------------------
SOC-BlockIPs
filter: 'SOC-BlockIPs'
members: total 0

----------------defined in shared-------------------
O: address object; R: registered ip; 😧 dynamic group; S: static group

Another question that i have is suppose the PA is not "alive" to get the updates , will MineWeld try to push the updates once ? or it will try again in a loop and wil update the device with the changes when it will be back ?

Re: DAG is not working

lmori — Wed, 21 Jun 2017 08:36:46 GMT

Hi @minow,

have you configured the devices under the output node device list ?

Whe you browse the tags under PAN-OS you should be able to see the tags pushed by MineMeld. By default they the mmld_ prrefix.

Re: DAG is not working

minow — Wed, 21 Jun 2017 10:42:54 GMT

thanks,

i was able to solve it somehow.

also the command i use for the cli was wrong , i needed the "registered ip" and not the "dynamic group"

Re: DAG is not working

lmori — Thu, 22 Jun 2017 16:20:20 GMT

Hi @minow,

thank you for letting us know.

Regards,

luigi

Re: DAG is not working

PrasadDigraskar — Sat, 19 Aug 2017 21:47:55 GMT

Hi Luigi,

I'm not able to see the tags pushed by MineMeld on PA firewall

I can see the following default tags: -

'mmld_pushed' and 'mmld_confidence_high' and 'mmld_direction_unknown'

I can't find any document related to the "DAGPusher" prototype, it would be great if you could share any document to configure the "DAGPusher" prototype.

Thank You

Re: DAG is not working

lmori — Wed, 23 Aug 2017 14:15:17 GMT

Hi @PrasadDigraskar,

those are the default tags pushed by the output node to the firewall. Which tags would you like to see ?

Thanks !

luigi