General Topics

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

miniduke

I got the question from de security dept, to investigate miniduke.

This was is detected by kaspersky labs, as an exploit of an Adobe flaw CVE-2013-6040

I dont' find anything on PaloAlto about miniduke , or CVE-2013-6040

Report on attempts to access unsuitable content

Hi All

I have been tasked with creating a report that shows if a user has attempted to access or find a way of accessing unsuitable content.

While I can obviously run a report on pages that have been blocked by the filtering system we want to see any

...

Resolved! Eicar and Palo Alto threat-db

First a question:

Where and how can I see what is the default action for a particular threat, vuln or spyware threatid?

Preferly from within the box itself...

And now for an observation:

I tried searching for eicar in the threat vault and obviously there

...

Resolved! Getting an application definition modified?

Folks.

I have run into an issue with the way a specific application passes the firewall, and I need to put in a request to Palo Alto to have it modified.

The application is Subversion, and when I set the firewall to allow only "application default" ser

...

URL Filtering - Continue Action on Terminal Server

Hi,

I have a customer who has deployed a PA-2020 with 3 Terminal Server agents at this seems to be operating well with one exception.

They have configured a URL filtering policy that has a Continue action on a number of categories.

When a standard LAN u

...

Resolved! SSL Decryption on Apps.

Outside of SSH and SSL applications can anyone if there is a lookup in applipedia to tell whether the SSL decode applies to an application?

Resolved! hashing algorithms used for aggregated interface

Does anyone know how aggregated interface on the 5000 series load balance the traffic? What hashing algorithms are supported? How to determine which physical interface(s) will carry the traffic?

Thanks,

Ernest

Is there a reason to hide hotfixes in Software Update?

I was curious to know if there was some prevailing notion as to why PA would keep the hotfixes hidden or at least not readily available from the Software section of the firewall itself.

It is displayed where deployment without the hotfix is a very bad

...

Palo Alto Vmware image

Hi,

I am planning to replace my company's firewalls with Palo alto instead of Checkpoint however I need try it out in a lab or something before I provide further information to my management team, Is there a way I can get a vmware image to try it out

...

Resolved! List of compatible SFP modules for PA3020

Hi all,

does somebody know if there is a list ob compatible SFP modules available for the PA-3020?

Thanks a lot for your help and best greetings,

Udo

Resolved! 5.0.2 upgrade question

I want to upgrade from 4.1.7 to 5.0.2, I am currently running Global Protect v1.1.6.. and pan agent user-id agent v4.1.4-3. Can I perform the upgrade without updating the GP client and user-id agents?

BGP Dampening Profiles

All,

Does anyone know the CLI command to use to view the dampening profiles status on flapping routes? There looks like a way to clear the status with clear counters bgp ... but I cannot find the available show command.

Thanks in advance,

Jason

4.1 series GUI dashboard

I have one box presently on 4.0.8 and one on 4.1.1. If I compare the dashboards, the 4.0 series one has the dates in the widgets in an international format (2012/01/12), which I have no trouble with. The 4.1 has the widget dates in a partial American

...

Resolved! DHCP / DHCPD server stopped working 5.0

PAN OS 5.0

App Version 342-1602 (12/04/12)

Uptime 22 days

PAN-OS DHCP server stopped working today (worked earliar only change wildfire & global protect updates)

DHCP server status shows it is not enabled although configured.

admin@PA

...

Agentless User-ID with PAN5.x - AD Configuration

I have read the tech article "How to Configure Agentless User-ID in PAN- OS 5.0.x"

I'd love to see this document broken into two docs - one that I can send out to customers to prepare for POC - the AD user account setup portion without the PAN firewal

...

General Topics

Discussions

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free