GlobalProtect Mobile Security Manager - How do I install it?

Hi all,

We currently have GlobalProtect setup with HIP policies to check for configurations on laptops and computers, which works perfectly. Now we're looking to support GlobalProtect for our mobile devices by using more HIP policies to restrict mobi

TAXII or STIX contextual data

Hello

I've succcessfuly been using Minemeld for some time now and I'm looking to further implement it

We currently have TAXII output working to our SIEM, however it just outputs basic data

<stix:Indicators>
<stix:Indicator id="minemeld:indicator-f

o365 HTTPSConnectionPool Error

My MM version is 0.9.52

and VM Version Ubuntu,

o365 miner is not working. and erorr blow..

minemeld-engin.log 

why not connect?

Only endpoints.office.com not connect...

Why Running custom reports Panorama times out?

When i use Run now for custom reports PAnorama M100 takes long times and it also sometime times out

Any reason why running custom reports with run time option it times out?

Globalprotect client config - force push portal config update?

We rolled out a vpn solution with “on-demand” login. This has proved successful and we now wish to convert the configuration to be “always on”

I have changed the portal configuration to “prelogon always on”, but the clients do not pick up this config ...

Require to restrict/ Control session of firewall ???

Please be informed that we want to restrict/control traffic for any specific service in our Core Firewall- Palo Alto 5050. Suppose, we want to allow maximum session/request – 10 thousand per month or 2 thousand per week in our firewall. So, is it pos...

Migration from symantec proxy sg to palo alto firewall

Hi All,

I am planning to migrate symantec proxysg ( proxy device ) to palo alto firewall device .

give some suggestions.

Block urls with *.php

I tried creating a custom URL categaory and adding *.php to it, and then use that in security policy, it doesn't seem to take any effect.

Correct IP setting when two firewalls connected to one ISP.

We have two PA's connecting to one ISP. One is just being set up.

The ISP is "10.10.10.0/27"

Route is "10.10.10.5"

Is it correct to have both firewall external vlan interfaces as such

FW1 "10.10.10.99/27"

FW2 "10.10.10.122/27"

 Vlan 140

And for the N

SNMP MIBs

Is there a list of recommended severities (i.e. Normal, Major, Critical) for events defined in the SNMP MIBs ? 

Thanks for the assistance

Security event

We have a security event that is repeated in a series of users, Not many users but the event is very frequent

---------------------

EVENT
Memory Corruption Exploit
AGENT TIME
21 May, 2019 at 6:08 (2 hours ago)
AGENT LOCAL TIME
21 May, 2019 at 6:08 (UTC +0