Suspicious traffic from internal to External IP

Hi All,

Recently on my SIEM console. I could observe the web traffic from the internal host machine towards the blacklisted IP over the port 443. Alert was flagged by the PaSeries (Palo alto firewall). Two events I have observed 

1)  CryptoMiner.Gen M

Add Policy Optimizer application list to existing shared application group

Is it possible to take the list of applications identified in the policy optimizer and add them to an existing shared application group? The only options I see are to add to existing or current rule. I have multiple firewalls and would like all the r

GlobalProtect on Android - what a pain

Hi everyone! I'm in the process of implementing VM-50 along with GP on a small network with adults and children. The idea is to make successful parent control of what kids can and cannot do and, at the same time, grant more privileges to adults/paren

packet dropped no route for ip multicast

Hi Team,

I have a multicast setup. I am able to see that the PIM neighbourship is completed and igmp membership also fine.

I can see my traffic in multicast fib with the correct incoming and outgoing interfaces. but the multicast packet is not reachin

Updated Azure JSON Miner?

So I'm looking at the Azure miners and they are referencing https://www.microsoft.com/EN-US/DOWNLOAD/confirmation.aspx?id=41653 which is being deprecated by MS and discontinued in June 2020.  It says to use the following links for the new JSON files

No logs on PA-200

I have inherited a PA-200 and recently just upgraded it to PAN-OS 8.1 and installed it. I have activated the licenses and subscriptions committed changes and reboot the device, but i am getting no logs at all with the exception of system logs.

Have i

Need to decide method of Paloalto firewall deployment L3 or vwire in an existing network infra

Hi,

I have many sites with different network infrastructure in different countries and i would like to deploy Paloalto firewalls below wan link, please help to  to decide method of Paloalto firewall deployment L3 or vwire in an existing network infra

How Do You Authenticate Users From Specific IP Ranges for Admin Device Access?

Palo Alto integrates with a number of products; which usually require specific user accounts on the firewall. If your firewall has management access exposed to the internet all of the accounts can be used to log into the firewall. Would it be possibl

Global protect new features suddenly showing up on portal app config

I am pretty sure they were not there before on the same version of GP that I am running on . I see option "Allow user to sign out from Global Protect APP" and "User Single Sign-on(macOS)". I do not see any documentation about those. I tried to activa