Recently we upgraded our PAM to 7.0.5 and since then we are receiving Intermittintly Desktop sharing failure request.Do you have recomandation?
I have a user that is on wireless at home and using the VPN to access files and folders on the network and he says it is slow. I told him to hardwire in to his switch and see if that helps. Any other areas I should check to see if the VPN? might be causing any of these issues:
Hey all!There is a strange problem with my PA 3020 7.1.7:I need access from a client pc to a printer with many ports so for testing I set up a security rule with application any and service any.The rule is enabled but it's not effective.The firewall even doesn't have traffic logs for this connection. I already had this problem in the past, I don...
I would like to set up a new Miner to collect the Public IP addresses for the Microsoft Windows Notification Service (WNS). The list is available as a downloadable xml file but I haven't been able to find a feed. Does anyone know whether it is possible to get the WNS IP list. Thanks.
hey i have started playing arround with MineWeld. i am testing a solution for a customer to update DynamicObject / Block lists on the PA to be used by the SOC team. i have created a IPv4 List and connected it directly to a DagPusher node. but when i add an indicator to the miner i do not see it on the PA dynamic group. this is what i see...
In effort to understand the processing of the Microsoft Office 365 MS O365 Dynamic IP addresses/Urls of Endpoints Url (see MS url below) by the MineMeld application, where is the configuration file with this MS Office 365 url stored for the Minemeld application? https://support.content.office.net/en-us/static/O365IPAddresses.xml The Minemeld YAM...
I'm using PA-5020 as a Perimeter firewall with User-ID implementation for 5000+ users with multiple User-ID Agents across network.Palo Alto Version : 7.1.8User-ID Agent Version : 7.0.7-13 Problem i'm facing is the User-ID Agent, all of a sudden it stops recognizing users and it causes the users distruption in services accessing different applica...
I see that new indicator types for file hashes (MD5, SHA256, SHA1, SSDEEP) were added in MineMeld 0.9.26 this is awesome, but should those indicator types be selectable from the ( NODES > ADD INDICATOR > TYPE ) drop down menu? I don't see them listed so I'm just trying to figure out how to employ the use of these new indicator types. I'm...
I've been asked to investigate Zone Protection on one of our PAN firewalls. I'm trying to determine what safe values would be for me to begin with for syn, icmp, udp and other ip protection types. Since this is a production firewall, I need to be certain I'm not going to generate any issues when the profile is applied. Is there a way for me to...
I am looking into abusers of our bandwidth and have found one person who has 11GB in a day reported as google-base and from the low number of sessions (18), I suspect it's file transfer. I could understand tht much traffic being google drive but surely that would be reported as that sub category and not "base". Why would large amounts of traf...
Hi All, I have installed a Palo Alto firewall on my vmware workstation 8.0, with current settings i am able to access the Firewall GUI from my machine browser. But unfortunately, i am unable to connect to internet via firewall interface. I have 3 interfaces namely - mgmt, Untrust and Trust. I am trying to update license on firewall which require...
Hello, We want to allow traffic from outside to come inside our server however cannot see any traffic unless loopback is used. This server is behind DMZ. We can solve the public IP address of the server when we go to www.whatismyip.com Traceroute stops at 13th hop before we added loopback for the public IP. We are using Source NAT like below: In...
Hi guys, We have a security rule that grant a certain app access to users based on AD group. User complained that sometime they can access the app and sometime they cant. Checked the firewall and found out that some of the traffics are logged under different user accounts, hence the right policy didnt get applied. User is using OSX (mac) and has...
Hi, I have constructed Palo Alto on Azure and now all connections are allowed to connect.However it seems Palo Alto blocks below website. https://blogs.technet.microsoft.com/ I already checked I can access without palo alto and i think it is the cause of this issue.I think I should contact support but i am unable to create my support account. I...
Hi Experts , Looking for OIDs to monitor below mentioned list , using SNMPv3 for Palo Alto on AWS cloud but unable to locate any MIBs or OIDs. BGP (Established , down)Tunnels ( IP , Status , Traffic Stats)SSH (User IP , Count) Any help will be highly appreciated. RegardsFaiz.
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
