General Topics

URL Filtering block websites?

I have a URL filter profile with a list of URLs set to block (under Objects  Security Profiles > URL Filtering), which is applied to security group profile. 

However none of the URLs are being blocked. 

Is there something I should check to confirm this

URL Filtering different with browser and application

Hi

We have a server, from where the user wants to go to, for example, abc.xyz.com.

The certificate from the website xyz.com has a CN *.xyz.com.

We dont have decryption for URL Filtering. In the URL Filtering category, we have allowed abc.xyz.com.

The u

Wildfire Update failure

Hello,

On the Tasks, I found Wildfire update failures.

How can we resolve that?

FQDN as source address

Hi to all

I have a problems with riles with FQDN

For example i created rule:

source ip - destination ip - destination port

I changed ip to FQDN object - pc1.domain.com.  Palo Alto can resolve name to IP. 

New Rule:

source FGDN - destination ip - dest

Custom Vulnerability Signature Name in Panorama logs

Anyone using custom vulnerability signatures in Panorama?

Simple example.

Threat ID 41000

Name SSH-Auth-Brute-Force

Using existing signature 31914 with Time Attribute to block source IP if too many login attempts in specified time period.

My issue is t

Carve public Subnet without involving Vendor

Anyway to accomplish following without modifying routes at the router?

I have a subnet 1.1.1.0/24

1.1.1.1/24 PAN ETH1 Need to route 1.1.1.50 from ETH1 -> ETH3 as it sits behind ETH3. I need ETH1 to reply back to router when it says arp who has for 1.

User lockouts in STS (external authentication service)

We are experiencing a high number of user lockouts with our externally accessible STS.

The traffic is HTTPS so it is making it through our blocking policies.

We are requiring MFA through DUO but the challenge/response for the username/password is hap

ISC DHCP Server Zero-Length Client Identifier Remote Denial Of Service Vulnerability

Can a vulnerability quit showing up in the threat logs but still be there or a issues?

for instance this 

Name: ISC DHCP Server Zero-Length Client Identifier Remote Denial Of Service Vulnerability

Unique Threat ID: 35223

Upgrading from 8.0.6 to 8.1.4 Issue

I am trying to upgrade from 8.0.6 to 8.1.4.

I can upload the image via the GUI and it states it saved. I use the cli to install the software package and it fails. I have downloaded 8.1.0 and 8.1.4. Do I need to upgrade to another iteration first?

Sid

Security Policy organization best practices?

We're working on an audit of our security policies to start getting rid of some generalized rules and start making things more specific.  I figured we could do some organization at the same time.  I'm curious how others are organizing their security