General Topics

Cisco VPN Behind PA-3220

We have a third-party that borrows our network to establish a VPN tunnel back to their office via a Cisco 881 ISR. We have it on a segregated guest network and it establishes an ike/ipsec tunnel back to their ASA over our internet connection.

Works

Someone school me on Syslog and Panorama

I have Panorama managing roughly 10 firewalls.  I have logging setup on those FWs to send to Panorama, email and send syslog to a 3rd party host.  I struggled immensely trying to get everything configured correctly on PANORAMA and the FWs themselves

Not getting proper SMTP traps for power supply removal and insertion

Hi Folks, 

We have PA-5260 in HA pair in our environment. Recently we had configured SNMPv2 traps on Palo Alto firewall to forward traps to our SNMP server and configured Log forwarding to forward All system logs as traps to the SNMP server.

Spec

Question about CVE-2022-0028 PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering (Severity: HIGH)

Dear all,

PAN-OS

CVE-2022-0028 PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering (Severity: HIGH)

https://security.paloaltonetworks.com/CVE-2022-0028

About CVE-2022-0028 on Palo Alto vulnerability. If we have

About C2 Sever attacks

how cortex xdr detect C2 server attack and what are the remediation techniques use for investigation

PAN-DB is not connect to cloud

DB Cloud is not connected as i have 9.0.3h3 version. And this command is also not running. Please suggest

request url-filtering download paloaltonetworks region <region_name>

Command user group name not working

Hi,

We just check that the command:  show user group name 'cn=......' has this output: 

user group xxxxx does not exist or does not have members. All config is OK. 

If we run "show user group list", i can see al the groups, but filtering by one of the

Issue with VXLAN traffic passing through the firewall

Hi Team, 

We have an SDWAN box placed behind the firewall and the SD_WAN box need to communicate with the controllers which is located on the internet.

The topology is given below:

SD_WAN Box<--->F/W LAN interface<--->F/W ISP interface <--> Internet <

0day padding oracle exploit on PAN-OS master key decryption?

Ran across this and am wondering if this is truly a new 0 Day or related to a previous RCE from a little while back regarding the default Master Key?  https://twitter.com/rqu50/status/1554566757704089600  There is proof of concept code for this.

office365 uploading App-ID not recognized error

Dear Team,

There is a symptom that the office365 application is not recognized correctly.

For example, if you connect to the office WEB (office.com) and create powerpoint and word documents, they are recognized as 'ms-powerpoint-online' and 'ms-s