General Topics

Virus/Win32.WGeneric.alpvzn - OneDriveSetup.exe detected in threat logs

@hisingh 

Hello,

Palo alto has been released a new signature Virus/Win32.WGeneric.alpvzn
Name: Virus/Win32.WGeneric.alpvzn
Unique Threat ID: 354554856

We are getting Virus alerts in the Threat log for OneDriveSetup.exe.
is that false positive?
how can I sto

Panorama - Remote PA52xx

I have not had much hands on with Palo Alto in particular Panorama but I would like to ask for some help -

We have Panorama at our central Data Center which is used to Configure our remote PA52xx's. 

If Panorama is used to apply policy to a firewall a

Need stdlib.aggregatorIPv4Generic to provide single IPs instead of IP ranges

Hello all,

I am trying to use Minemeld in a setup with Microsoft Sentinel (Microsoft Graph). 

I am encountering an issue with entities of type IP, as they are getting  in my log analytics space as IP ranges, mentioned in the "ExternalIndicatorID" alo

VPN up but traffic not matching outbound policy, inbound policy is working

Recent new VPN tunnel is up with Azure.  I can see traffic matching zone VPN-S2S > trust but anything from trust > VPN-S2S zone is not matching that specific policy.  The oubound traffic is matching the blanket outbound policy and I can't figure out

Block layer 4 traffic for destination blocked on URL filtering

We have a very peculiar situation. There is Azure public PaaS environment connected over express route and we have a Palo inline. Now the destination ip/subnet range is dynamic but we just end to allow few specific URLs. It was all fine where we had

PAN-OS 9.0 URL DB manual Download not available

Hi,

not sure if I to stupid to find it, but after upgrading to PAN-SO 9.0 there is no more option under Licenses URL DB to download the URL DB manually. 

In an Active/Passive Cluster the Active Firewall downloads the URL DB every few hours, but the p

Why do unused rules show traffic hits?

I am doing cleanup of old unused firewall rules. Using the UNUSED policy optimizer I noticed that some rules are showing Traffic usage but 0 hits? Can someone explain why this is? I am wary to trust the HIT count until I understand the correlation. B

Block Tor application traffic.

Hi

We are planning to block Tor application traffic in our PA device , so do we need to write security policy in both the direction  and also share the steps to block the traffic in Palo Alto device.

Thanks,

Yusuf

radius authentication issue

After the device PA-500 is upgraded from 7.1 to 8.1.15, the radius authentication of the user name and password of the device fails, and we can only log in to the device through local authentication. After performing Radius-related configuration acco

PAN-OS 8.0.15 issues X SNMP

We updated the 2 pair of Firewalls on last sunday to 8.0.15 and after that our CACTI stop to show the interfaces statistics from PA-5020.
Cacti is monitoring the updated PA-3020 correctly.  The issue only happen with PA-5020.


Did anyone experience some

PBF with nat

Hi

So I have 1 internal address that when it goes out via the PA to the internet (SNAT) i want it us a specific route - net hop.

So it looks like I can't set pBF on source address (SNAT). has to be on the original address.

and I can't specify outbound

Global Protect new Linux UI

I have the GP Linux CLI client working without any issues, however I wanted to test the UI client that just came out (5.1.0) Does anyone know how to actually use this? The PAN documentation has not been updated to mention this new version or the Linu