Reply
Highlighted
L0 Member
Posts: 3
Registered: ‎11-22-2016

Autofocus MineMeld - how to access output node that requires authorisation

[ Edited ]

I need to create O365 IP/URL EDLs but when I try to access the output nodes I get "Unauthorised" message unless I sign into AutoFocus in the browser. Needless to say I cannot do the same on a firewall. How do I allow anonymous connections to a feed in Autofocus MineMeld or use authentication when configuring EDL on a firewall? 

L5 Sessionator
Posts: 275
Registered: ‎11-15-2012

Re: Autofocus MineMeld - how to access output node that requires authorisation

[ Edited ]

You have to create a "feeduser" and attach it as a TAG to the output nodePicture1.png

 

Picture2.png

 

Picture3.png

 

In the PANOS device:

  • If running PANOS 8.0, enable client authentication and populate user and password fields.
  • If running PANOS 7.1 use the basic auth URL syntax (https://<user>:<password>@domain.com/url)

 

 

L0 Member
Posts: 2
Registered: ‎09-22-2017

Re: Autofocus MineMeld - how to access output node that requires authorisation

Hi, I'm new working on Minemeld. I have an issue, I want to enable authentication for an output node, but above the
FEEDS USERS manager i had the following message: Warning! authentication for output feeds is disabled
How to enable it?

 

Thank you

 download.png
L5 Sessionator
Posts: 275
Registered: ‎11-15-2012

Re: Autofocus MineMeld - how to access output node that requires authorisation

@jonnynux : are you using MineMeld hosted in AutoFocus? AFAIK MM in AutoFocus has Authentication for Output feeds enabled by default.

L0 Member
Posts: 2
Registered: ‎09-22-2017

Re: Autofocus MineMeld - how to access output node that requires authorisation

L3 Networker
Posts: 44
Registered: ‎06-19-2012

Re: Autofocus MineMeld - how to access output node that requires authorisation

I'm trying to do this, but I must be missing something.  I have created a feed user and I have added a tag to the user.  I've associated that tab with my feed and that looks good so far.  My questions pertains to the modification of the URL.

 

In the PANOS device use the basic auth URL syntax (https://<user>:<password>@domain.com/url)

 

My firewall is running 7.1, and I cannot figure out the right syntax to use here.  https://user:password@example.com/rest-of-url-copied-from-autofocus generates an unauthorized errror.  I can't test the URL now with a browser because the browser believes I am connecting to a site in example.com.  

 

Could you show an actual URL that I could mimick in my configuration?  That would be a huge help.

 

-Mike

L5 Sessionator
Posts: 275
Registered: ‎11-15-2012

Re: Autofocus MineMeld - how to access output node that requires authorisation

@msemaniuk : I just tested the syntax in a 7.1 PANOS NGFW and it works in my case.

 

https://sxxxxxpp:sxxxxx6@dxxxxxff.paloaltonetworksapp.com/feeds/office365_IPv4s

Are you using MineMeld in AutoFocus?

L3 Networker
Posts: 44
Registered: ‎06-19-2012

Re: Autofocus MineMeld - how to access output node that requires authorisation

Yes, it's in autofocus.  I believe I see my syntax problem.  I will give it a try in the morning!

-Mike

L3 Networker
Posts: 44
Registered: ‎06-19-2012

Re: Autofocus MineMeld - how to access output node that requires authorisation

I have fixed my formatting issue, but I'm not sure that it is resolving things.  I can test the URL with an 8.1 firewall.  My customer however, cannot get this to work with a 7.1 firewall.  I am going to rebuild my PA-200 as 7.1 so that I can try it personally.  

 

This is my format I am using.

 

https://user:pass@f******.paloaltonetworks-app.com/feeds/the-rest-of-the-url

 

I've also checked it in a browser and I receive an unauthorized notification.  

 

-Mike

L3 Networker
Posts: 44
Registered: ‎06-19-2012

Re: Autofocus MineMeld - how to access output node that requires authorisation

Turns out my customer was testing in a browser, and not with the firewall.  He's good to go with the correct formatting of the URL.  Thanks for the help!

 

-Mike

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!