Renew firewall CA certificate and distribute with GPO

We have created on the firewall a Root CA which also signs the SSL Forward Trust certificate.

The firewall Root CA certificate has been deployed with GPO to all our devices there Trusted Root Certificate Authorities.

The root ca certificate on the fire

TAXII feed for SIEM

Hi,

I have tried minemeld with few miners and output to the inbounfeedhc i.e. PAN EBL/DBL. It is worked as expected. I would like to push the data to SIEM so that i can perform log analysis based on the indicators. How can i use taxii? I have confi

Reset Password company account for support palo email not received

i try to reset my company account password but still not received link in my email

Integrate AlientVault feeds into minemeld

I have been trying to add the alienvault otx feeds to minemeld and followed the steps mentioned in:
https://live.paloaltonetworks.com/t5/MineMeld-Discussions/AlienVault-taxii-miner-versus-prebuilt-reputation-data-miner/td-p/157037

However, I get this

Traffic diversion

Hello 

We have a customer who are running some oracle application in cloud  . We have built a site to site vpn between our on prem PA 3200 towards the cloud . Traffic is flowing over this tunnel to and fro

Now we have another company called company B

SSL Decryption blocking the Google Drive Desktop

Good afternoon, 

We recently enabled SSL Decryption on our FW and seem to have broken our Google Drive Desktop. We can access Google Drive via web, but just can't access it via the Google Desktop file stream. 

Anyone experiencing this? 

EDL Lists - Minemeld

I've made our Minemeld server publicly available and have provisioned a number of lists we use plus some that were part of the old PANWDBL server. You're free to use this server but please be aware that I don't provide any guarantees or warranties to

Use Cloud Service (like Cloud Front subnets) in security policies

I would like to use, for example, CloudFront subnets (I 've about 50 of them) in Security Policies.

I find this script https://github.com/chrisgoodwins/paloalto_add-addresses.

Is there the way to use a single big static list without use many address

PA -220 Slow

Hi experts ,

When I press commit on the Palo alto firewall It takes a long time around 5 or 7 minutes to complete this task, 

and Management CPU reached to full as a screenshot. It’s kinda made it really difficult to work on this device now. 

devise Mod

Ask Me Anything (AMA) Q&A Event - May 4, 2021 - Cortex XDR Alert Tuning !

Happening TODAY at 8AM PDT - the LIVEcommunity Ask Me Anything (AMA) Q&A event.

Join us, ask questions and learn about Cortex XDR Alerts. Please be sure to click Like if a post is helpful to you and to "Accept as Solution" to let everyone know tha