General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Exception for threat type "file"?

Hi, I have following in my logs: Threat tpye: fileThreat name: CSV fileID: 52032Severity: lowFile Name: xyz.csv For Vulnerability Protection and Anti-Spyware I know how to easily create exceptions for specific IPs/URLs. Is there a way to easily create exceptions the same way for "file threats"?Furthermore I'm not aware that my file blocking prof...

Installing a pair of 850s and a pair of 3260s this weekend - interface speed

We have had some requirements change since ordering this equipment and may change direction on where these new firewalls get installed. Initially we ordered the 3260s for our hosted data center since most of the servers are located there and vendor provided backup solution is there. The concern was the amount of traffic that we would be pushing ...

Resolved! HA2 Backup Port Link Speed

Does the HA2 backup port need to be the same link speed as the primary HA2 port? Customer is wondering if it is possible to use a 10G SFP+ port to backup the 40G HSCI port. I cannot find anything in the documentation discussing this and don't currently have access to the hardware to test. Thanks.

User-ID Service - Client IP Population

All, When we first installed our User-ID Agent service on Windows Server 4-5 years ago we implemented Security Log Reading (from domain controllers logs), AD Session Scanning, and MWI polling. About 5-6 days ago we started running into issues (which we have yet to determine what is causing it), where polling seems to be openeing up multiple con...

problem after upgrade with Task Manager

Hello,After upgrade panorama from 8.0.6 to 8.0.8. the Commit All operation stopped showing the progress bar in the Task Manager.the Status colon in the Task Manager shows "Completed" and the "End Time" colon shows the exact date and time as the "Start Time" colon. Someone know if this is a problem for this release?

Resolved! Stable MineMeld version and new Office 365 API

Hi guys, I'm using Minemeld 0.9.44.post1 and would like to test the new prototype O365 API MINER, since microsoft decided to change the way they publish IPs and URLs. I know that the development version of Minemeld (0.9.46) already comes with it, however I would like to maintain my stable version and only get the mentioned prototype to test. Is ...

Resolved! how are files forwarded to wildfire?

Please help me understand how files are forwarded to wildfire public cloud and how secure is the connection between firewall and wildfire cloud?Also, my understanding is that firewall hashes every file it encounters against its databse(local) and lookups for new hash info on cloud whenever a policy hit occurs for wildfire.Am I correct? TIA

Resolved! DNS sinkhole not blocking malware

PC does DNS query, which gets inspected and is not sinkholed. PC then sends traffic to resolved address which gets inspected and blocked as malware. This is the pattern i am seeing right now and this is not for a single domain. I am not saying sinkhole is not working, it is working but not for all destinations. Below is the example of both sink...

Resolved! External access question

Hi, I am a network admin and sometimes SQL admin. I have been asked to allow a consultant to build a database reporting server on our network. He will VPN into our network through a Palo Alto firewall and use RDP to access a single non-domain server called "Reports." A firewall rule will control this access. On the Reports server, the consultant...

SSL Decryption quits working.

We have SSL Decryption setup and seems to work for awhile and then quits. I cannot say for sure but it seems to be USER-ID related. Out IT department logs in locally onto their laptops. They might occasionally map a network drive or launch a program using run as their domain user account. You might be browsing away and all the SSL is working...

High Sierra and GP 4.0.5

When installing GlobalProject on High Sierra we can connect to our site and install the software. When we enter the portal and connect we just see a spinning disc. It never connects, never asks for credentials. This only happens on High Sierra.

ping speed

Is it possible that, delay and the inconstancy of ping speed is due to the low priority of ping compared to other packages?

Resolved! Regions group

Can we build a Regions group to use in Policies on a PA-3050?

How ARP request initiated from Palo Alto sub interface

I am having some issues new ISP. I have assigned my sub interface with /29 range of IP given by my ISP.I have added staic route towards gateway of ISP with exit interface( sub interface) specified in Palo Alto Virtual router.Can some tell who will initaite ARP between these interface( its same subnet)When I take the packet capture, only ISP send...

Resolved! How to list url filtering profile using CLI

Hello I need to apply url filtering profile to two of my PA devices. I'm using PANOS 8.x How to list setting of one of my url profile (Object>url filtering> name of profile) ie. "url-set_1" on my first device and set the same setting on another one using CLI? I cand find keyword for list settings 😞 - help me please RegardsSlawek

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

Exception for threat type "file"?