EDL URL List Format and Subpages

I understand that for an EDL of type URL, the format is either 

company.com

*.company.com

This will include any additional subdomains, whether at the beginning or the end of the URL. 

Regarding the forward slash, will a URL like the following be a val

Captive Portal for Corporate devices

We have recently upgraded our HA firewall cluster (PA-3020) from 7.1.22 to 9.1.6 following the suggested upgrade path by PA.

We have captive portal in place, before the upgrade, all our corporate windows 10 laptops as soon as we power them on, they us

Minemeld MISP miner needs a revisit

Hi guys,

I believe the MISP miner for Minemeld needs a re-visit. None of the tagged indicators are being pulled by Minemeld from our MISP instance. I think there are a lot of changes to the current API as compared to the ones used by the current mine

Query on file blocking profile.

Hi,

Can we achieve the following points,

1.Required only our office  domain user can able to access upload/download file
2.Hotmail user can only access for downloading / uploading block
3.Another domain user (Guest user) only downloading the file uploa

Bad Gateway error

Hello All,

I installed minemeld on aws instance, when I am trying to logging getting "Error checking credential: bad gateway". I checked Minemeld services and getting error as :

minemeld-engine                  FATAL     Exited too quickly (process l

Tons of "Generic:<URL> hits in threat logs for DNS Query hits

Hi Guys,

I am seeing a ton of "generic:<random-url>" hits in my threat logs under the spyware category for DNS queries from my email spam filter server out to the world. I have DNS security set up on the Palo so they are being sinkholed, but there ar

Best Practices for acquisition

Hi Guys,

Our company has recently made several acquisitions. All of them have non-palo alto firewalls. We will be migrating each of non-palo firewalls to our palos.

Now, for migrating the rules, we are using expedition. 

But, some of them have overlapp

PaloAlto and DNS

I have PAN running version 8.1.17 and it is configured with two DNS servers on the management interface, you know the usual, nothing special.  I have security and NAT rule on the PAN firewall the uses FQDN. 

Is there a way to detect when the PAN fail

Panorama via S2S VPN

Hi everyone,

We have our PA Firewalls in different countries all around the globe.

Lets call them Country1, Country2. Country3 and so on.

All locations are connected to each other via S2S VPN.

We have Panorama in location Country1. And it manages firewa