Custom Signatures
The Custom Signatures discussion is a resource for security professionals to discuss the creation process of custom signatures in their PAN-OS appliance.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Discussions

Welcome to the Custom Signatures Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 3495 Views
  • 0 replies
  • 0 Likes

Welcome to the Palo Alto Networks Custom Signature discussion board!

The purpose of this board is to discuss everything related to custom signature creation in PAN-OS devices. Palo Alto Networks delivers a large quantity of coverage in our weekly content updates; however, we know that our customers are staffed by dedicated security professionals as well, and we would like to provide an environment in which to fos...

rcole by L4 Transporter
  • 37583 Views
  • 4 replies
  • 4 Likes

How to make custom signature with segment field?

Recently, URL filter evasion application often use tcp segment field. How to make custom application with tcp segment field? Protocol sequence. 1. SYN 2. SYN,ACK 3. ACK 4. PSH,ACK : TCP segment data has GET / HTTP/1.1 It can bypass our URL filtering. You can download and reproduce using below link. http://1bil.net/DodgeChrome-31.zip ...

dodgechrome_tcp_segment.png
Labels
  • dodge chrome 1