The purpose of this board is to discuss everything related to custom signature creation in PAN-OS devices. Palo Alto Networks delivers a large quantity of coverage in our weekly content updates; however, we know that our customers are staffed by dedi
...
hi.
I'am trying to create a custom mail app-id filter, for matching; to whom mail is gonging to and from what domain.
I have add smtp as a parent application in the app-id.
My app-id is matching the helo, mail from, rcp, data. from the mail. The
...
Hello,
I created a custom vulnerability signature that helps to detect and block the recently discovered Joomla RCE zero day which has since been patched by the vendor. I've opened a case with an engineer and he suggesed some additional protections
...
Hello,
My IDS has detected a new Angler signature on my network and it was allowed by my PA firewall. The traffic was allowed being the IDS is not inline. How do I submit packets for a threat update/addition?
Recently, URL filter evasion application often use tcp segment field.
How to make custom application with tcp segment field?
Protocol sequence.
1. SYN
2. SYN,ACK
3. ACK
4. PSH,ACK : TCP segment data has GET / HTTP/1.1
It can bypass our URL
...
Ran into an issue here tonight where when you clone a profile for anti spyware and pattern match based on that, this is broken and will not alert. Be sure to create a new profile from scratch. I have submitted this to Palo for them to vet this issue...
nikoolayy1
on:
Frebniis Malware Hijacks Microsoft IIS Function to Deploy Backdoor
nikoolayy1
on:
Vulnerabilities
nikoolayy1
on:
SMTP Brute Force - different source IPs
nikoolayy1
on:
Has anyone done a custom APP to block recursive DNS queries?
nikoolayy1
on:
Minimal configuration for Custom Apps
nikoolayy1
on:
Custom signature for catch specific query
