Fortigate Minemeld URL feed injestion issue - outgoing URL connections blocked by Minemeld feed policy on Fortigate Firewall

Good afternoon,

we've noticed a strange issue on a client firewall that injests URL IoCs from our Minemeld instance into an outbound block policy.

Specifically it seems that the Firewall Minemeld Policy is blocking outgoing URLs connections that are

Spli tunneling for ms-update files

Hi,

We have GP configured with 0.0.0.0/0 inside tunnel. We would like to split-tunneling for microsoft updates. In the split tunneling profile we add several microsoft URLs in order to avoid but its not working.

We added this URLS:

*.update.microsoft.c

random-drop vs drop - zone protection

For TCP flood logs should only show "random-drop" with RED configured.

"drop" for TCP flood is this coming from options set under "TCP Drop" options under Packet Based Attack Protection. 

URL-Profile Duplicates

Tacas Configuration Issue

Hi Team,

We are using tacas server for authentication administrator account on panorama we have applied the tacas server authentication profile directly on Device > setup > management > authentication settings.when we are able to login from particula

Problem with URL Filtering Order

Hello All,

I need a help in my case, i have a bunch of urls which must be permitted and any thing else must be denied. so i create a white list url using the (Custom Objects - URL Filtering) and then i create a URL Security Profile and blocked every

How to capture embed youtube videos with Minemeld

I already see that I'm able to filter (allow some and block other) videos using minemeld and Youtube API V3. But some of the videos are embed (on format youtube.com/embed/Video_ID), the minemeld captures only https://www.youtube.com/watch?v= 

So wh

PA850 HA Switchover Delay

I have setup two PA850 in a active passive pair. I am simulating failover manually, when I disconnect the cable, I see around 8 packet drops. Is there any specific settings to reduce the delay. 4 packet drops are acceptable. I have bundled interfaces

Palo Alto ICAP Configuration

Can anyone share any document for Palo Alto ICAP integration with 3rd party Sandbox Solutions.

Blue screen on Windows 10 after GlobalProtect 5.2.4

Hi team,

I've been facing the following issue. I did an upgrade in the GlobalProtect version (from 5.1.8 to 5.2.4). And it worked normally but, I saw in 3 specific laptops that, when the user installs the app on his laptop, the laptops start to see b

How to change or delete user account

I want to change lever user account or delete super user account, because when i first registered from portal support.paloaltonetworks i input the wrong doamin, namely ayi.witarsa@polypld.co.id (is false), it should be ayi.witarsa@topypld.co.id (is t