General Topics

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Resolved! Can I sort or filter a threat report on Severity?

I have created a really useful daily report of threats but it's full of stuff I am not too worried about so would like to filter it based on the severity.

I have included the threat severity in the columns displayed but it won't let me use the severit

...

insufficient-data and probe-skype Problems

Hi Guys,

When I'm trying to monitor the traffic via Monitor tab on Palo Alto, i can see insufficient-data under Apllication tab(usin tcp protocol) and probe-skype(using udp protocol).

Who can explain me what means that two applications?I need more info

...

Resolved! BGP AS OVERRIDE

Can PAN-OS 6.0 do AS override?

How do I apply the anti-POODLE (SSLv3) threat detection to GlobalProtect?

I wanted to test detection of vulnerability 36815 on inbound traffic to the GlobalProtect portal. I'd received an email from PAN on 10/20 which suggested signature 36815 could be used to block attempted SSL 3.0 sessions including "GlobalProtect SSL V

...

Resolved! Pa-2020 restart unexpected

Hello

My Pa-2020 restart unexpectedly with no reason aparently. I'm attaching the log so any help me is welcome.

Thanks!

Log:

2014/10/30 11:04:56 info general general 0 Connection to Update server: updates.paloaltonetworks.com completed succe

...

Global Protect Best Practices

I have deployed Global Protect with Single Sign on and have internal host detection. I have everything working and connecting fine, I have one portal and 3 gateways.

What I have seen is that some internal clients are connecting to an internal gatew

...

Resolved! Spamhaus Domain Block List (DBL) PANOS Integration

I recently discovered that one of my favorite real time block list providers has a new block list for domains that are found in phishing emails. PANOS has the ability to use a dynamic block list (DBL)/(EBL) external block list, but from what I have g

...

FTP session logged as 2 TCP sessions

Hello.

I have a problem with the way PA handles FTP sessions. I have a general rule which allows privileged user groups to have full access to a certain network. So application and service in this rule is 'any'. One of the applications users will be u

...

Filter Security Policy by Profile column?

How do I filter the Security Policy to show only those rules that have a specified profile, or no profile, assigned? We have a large, ~560 rule rulebase. I need to be able to easily find rules that have a specific profiles assigned. Scrolling through

...

Resolved! 6.0.5 h3 explanation

Hi all

could someone give an example about 6.0.5 h3 asymmetric bypass.When to enable that ?

how that asymmetric trafic works with 6.0.5 but not with 6.0.5-h3 ? That is the thing I'm confused about.

Panorama commit procedure

hey

does anyone have a document that describes "step by step" the commit procedure of the panorama?

just had a quick talk with support and apparently the commits from panorama are calculating directly to the running configuration

User ID Agent

I have a problem where the user id Agent is reporting the wrong user to an IP.

For example, user a is 10.1.1.5 and has id test1

Sometimes user b with an id of test 2 shows up with 10.1.1.5 which is not accurate, if I do a show user Ip mapping it shows

...

Resolved! not-resolved URL Category

We are seeing a large amount of url logs being categorized as 'not-resolved' at a rate of about 5500 per hour. After reviewing logs to compare it appears it started a few days previous. What is strange is a site will be categorized as 'not-resolved'

...

NSS Labs Report - Mitigation for claimed vulnerabilities?

Seriously? | NSS Labs

Could someone elaborate on the section which says:

All PAN-OS devices require a configuration change to detect even the most basic TCP stream segmentation evasions. The “Mismatched overlapping TCP segment” protection in the Zone P

...

Resolved! Microsoft Windows SChannel Malformed Certificate Request Remote Code Execution

Hi.

Can anyone provide insight into the threat signature for MS10-049? What it triggers on, etc.? I have seen this triggered by Goggle domain IP sources that produce certificate errors.

Thanks,

Monica

General Topics

Discussions

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free