Detecting VNC without a password

Has anybody tried to create a custom siganture, (or has it been discussed as a native signature by Palo Alto), for detecting a VNC session initiated without a password challenge/response? It seems like this would be a useful audit notification to pro

Correct syntax for a vsys level commit

I'm having troubles committing out 4.1.4 device for a particular vsys using the XML-API. I'm wondering if I have the syntax correct:

https://{some ip}/api/?type=commit&action=set&cmd=<commit><partial><vsys>vsys1</vsys></partial></commit>&key={somekey}

Getting PAN-OS version from XML-API

I was wondering how you can get the current version of the PAN-OS thru the XML-API? I can see the <config version="4.0.0"> when I use the show command but I know that we are really on 4.0.8. How do I get this version number, rather than the 4.0.0?

Detecting the Nmap Scanning Engine User Agent

Nmap is an open source utility used to scan map networks, and scan for open ports on workstations and servers. During the scripting stage of the network scan, Nmap will attempt to connect using HTTP, and has it's own user agent.

Setting address attributes via API

I am using the REST API to create address records and adding them to an address group.  I would like to keep track of when each address was created, and I noticed that there is an attribute of "time" on both the entry and the elements in the entry fo