Resolved! Transcribing Yara Signatures for PA Custom Threat Signatures

Hello All,

Has anyone translated, transcribed or converted an existing Yara malware signature to a Palo Alto custom threat signature?

http://code.google.com/p/yara-project/

Thanks,

-Paul

Resolved! How URLs are logged

hello,

I was doing some URL reports and I did some test to see how URL are logged by the PAN FW ver 4.1.8 and I have some question.

Let's take a simple url page www.liceobellinzona.ch. when you request it, using a browser, you can see with wireshark al

Resolved! Panorama centralised syslog forwarding ?

Is the following scenario configurable :

FIREWALLS--->panoramalogging--->PANORAMA--->syslog--->SYSLOGSERVER

Usually enterprises have a Central Firewall Management infra (= Panorama ) and a SIEM infra.

But we want to avoid that individual firewalls needs

Resolved! Does Palo Alto support reverse telnet?

Thank you,

Resolved! Is it possible to define expiration time for loacal auth data base?

Hi All,

Is it possible to define expiration date for loacal auth database?

ie. creating the user names on local database for 5 days, after 5 days these user names should get expired.

Regards,

Gururaj

Resolved! Data Filtering - Reverse possible?

For a client, we are working on a regulatory need where we need to block any administrator attempts to login to a web application sitting behind the firewall. I created a data filtering rule which looks for the admin names and it DOES block it, howev

Resolved! Default Timeout Value for IP=AD_username mappings

I need to check the default timeout value for unmapping Active Dir Usernames to IPs. Where can I find/change this?

Last Friday, I found a suspect machine on my network. I find the laptop. And its some drywaller plugged into the network using (im guess

Resolved! Is it possible to import logs from wireshark or ethreal and view in the PaloAlto?

Hi All,

Is it possible to import logs from wireshark or ethreal and view in the PaloAlto?

Regards,

Gururaj

Resolved! what about established TCP sessions when fail-over occurs in HA mode ?

Hi All,

what about established TCP sessions when fail-over occurs in HA mode ?

is TCP session is terminated or continued? in both A/A and A/P HA mode.

Regards,

Gururaj