General Topics

Update List Using REST \ similar

Maybe a stupid question and\or I've missed the obvious...

One of the issues we have with our Palo firewalls is - when we deploy 'active' IPS rules (block-ip etc) the maximum length of time is 3600 seconds. 

We have a log solution that we use to t

Deploying Minemeld Using Vagrant and Virtualbox

Hello All,

Based on @lmori's great guide for doing a manual install of Minemeld on Ubuntu 14.04, I have taken his configurations and wrapped them in a Vagrantfile for easy foolproof deployment of Minemeld. It's a simple 3 step process:

1. Install la

TAXII Feeds not working correctly.

I am having major issues with my TAXII feeds recently. A long running feed stopped working recently with an error "'unicode' object has no attribute 'get'". I have figured out that it only gives this error on any MM instances running on Trusty 14.0.4

How to get MineMeld Feed Base URL - HTTP instead of HTTPS

Hello Network,

Is it possible to configure a Minemeld node to have a Feed base URL that is HTTP instead of HTTPS? 

Thank you in advance,

Scott

what means session end reason with tcp-reuse?

Hi All,

i having 1 application claim that their port is stuck on Syn send status and there is possibility causing by palo alto firewall. i did check on the traffic log .. it showing session end with tcp resue. i not sure is that tcp-reuse will causin

PA220 running 8.1 GlobalProtect data file version failed to install

Hi,

Got this message on PA220 running 8.1,

Time Severity Subtype Object EventID ID Description
===============================================================================
2018/03/18 02:00:18 high general general 0 GlobalProtect data file version 15

Unable SSH to Palo Alto firewall via SSH2

Hi everyone,

Now I can access webui normanly but I can't access to Firewall Palo Alto via SSH2 with the same account. When login with SecureCRT, it appears notification :  Password Authentication Failed. On palo alto appears notification : Failed pas

Scheduling support sessions with end-users

I was just wondering if Palo Alto would consider scheduling support sessions with customers via https://www.timetrade.com/ or something similar. This would help to manage time coordinating support sessions.

Thanks,

xauth use on global protect tunnels

how many are using xauth on the global protect tunnels and why ? We are using it because we have users using native clients on PC's and phones (don't want to pay for the mobile license for on)? 

Let me know what you think and the pros and cons of usin

PaloAlto Networks Discloses Confidential Security Information to Third Parties w/o customer consent

I just was emailed a Palo Alto Networks security report listing information on all of the wildfire submissions from our organization.   This email came from a vendor that we had never purchased Palo Alto products from and contained detailed informati

Bootstrap the VM-Series Firewall on ESXi

I have an OVA of PA VM-100 series version 8.0.5.

I'm trying to follow the article for "Bootstrap the VM-Series Firewall on ESXi" at:

https://www.paloaltonetworks.com/documentation/71/virtualization/virtualization/bootstrap-the-vm-series-firewall/boots