General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

indicators and values

 Hi,

   I noticed that when creating the '_process_item' code for a new miner, you generate data as an indicator, and a value.  I am able to generate an EDL with my code, but it looks like the values associated with the indicators are not present.  

...

vb0398 by L2 Linker
  • 3935 Views
  • 5 replies
  • 0 Likes

Application overrides

Hi

 

So I ran ito the 150 application over rides limit.

 

At my location I have a lot of java app running, they normally provide a http interface a JMX and RMI and https interface. and when you have 15 -20 of these that suchs up a lot of application over

...

taxii subscription management error

Hello!

I have a problem with subscription to taxii collection deployed in my MineMeld instance.

When I try to subscribe to collection or get its status I get an error (cabby taxii client have been used for this request):

 

 

taxii-subscription --veri

...

KVasiliy by L2 Linker
  • 3222 Views
  • 2 replies
  • 0 Likes

taxii data set support

Good morning!

I try to add taxii miner for private TI provider.

When I commit it I have an error message - "collection xxxxx is not a data feed (DATA_SET)".

Could you tell me, does MM have taxii data set support?

Thanks! 

KVasiliy by L2 Linker
  • 3181 Views
  • 4 replies
  • 0 Likes

Resolved! New to PAN - coming from ASA - NAT nightmares

Hi guys,

 

I have come from Cisco ASAs whereby it is super easy to create port forwarding/translation - really useful when only have single public IP.

 

object network web-server

 host 192.168.1.10

 nat (inside,outisde) static interface service tcp 80 80

 

 

...

Problem downgrade PAN-500

Hi all!

 

i am trying to downgrade a PA-500 from 7.1.7 to 5.0.X.

I have downgraded to 7.0.1, but i am nor allowed to downgrade to 6.1.0, when i upload the image file it says 'PanOS_500-6.1.0 already exists', but the only images present are 7.0.1 and 4.1

...

DKanta by L2 Linker
  • 3578 Views
  • 6 replies
  • 0 Likes

Resolved! GlobalProtect protect client upgrade

Well if you saw my last post I have upgrade my PA 5050 from 7.0.12 to 7.1.9 and had a few issues with an Any vs and any in my VPN.

I am now needing to upgrade my global protect client. Currently I am on 2.2.0 and not sure what the best version is to u

...

jdprovine by L4 Transporter
  • 2948 Views
  • 4 replies
  • 0 Likes

Resolved! Ping through PBF Policy intermittently dying

I think this might be related to DoS protection somehow, but I can't find anything being blocked in any of the logs.  I'm sure I'm not looking in the right spot, though.

 

We have a normal Internet gateway (default route), and a separate point-to-point

...

fjwcash by L4 Transporter
  • 2596 Views
  • 2 replies
  • 0 Likes

Resolved! Incomplete traffic: custom appID and QoS

Hi,

 

I have traffic generated by Solarwinds NetPath probes that is tagged by the firewall as "incomplete".

 

I run a packet trace, and after the handshake, there are only TCP-keep-alive packets.  I'd like to prioritize this traffic in QoS, currently I'm

...

Sophos Central firewall rules question

My company is trying to implement  Sophos central throughout our network.


All clients need the access listed in the article below.

 

https://community.sophos.com/kb/en-us/121936

 

Currently Sophos central doesn't support the proxy solution we use.

 

what is

...

njuttner by L1 Bithead
  • 5295 Views
  • 8 replies
  • 0 Likes

Resolved! Decryption Policy Rule - Profile is None

With my new employer I'm managing a 3050 unit with a couple of Decryption Policy Rules which are configured to decrypt using SSL Forward Proxy. The Decryption Profile under Options is set to None. I can't find what the behaviour is when the decryptio

...

Resolved! Content update 709 revoked?

All firewalls automatically downgraded content version from 709 to 708. Was 709 revoked? Anybody else having the same behavior?

Anon1 by L4 Transporter
  • 5150 Views
  • 8 replies
  • 0 Likes
  • 23716 Posts
  • 104 Subscriptions
Top Solution Authors
Top Liked Authors
Labels