Resolved! Monitor subinterfaces and get NetFlow statistics

Hi,

We have a PA-5020 and configured a few AGG interfaces with subinterface; recently, we installed a SolarWinds NTA to get NetFlow statistics, but I am not able to get anything from this device.

I have created a profile and applied to the subinterface

Resolved! blocking apps on non-default ports

Hi,

Sadly don't have PA to play around at the moment, so have to pass this question for all you out there as I'm sure I cannot be first one with such an idea.

What is the best way to block apps on their non-default ports?

Basically, allow apps ONLY on

Resolved! Can I enforce security based in AD Computer groups yet?

I see history here indicating the user-id agent has been blind to computer names when the group membership is added to user IDs.  The CLI DOES show the computer name as a userID (with a post-pended $) and the groups are mapped correctly to the comput

Resolved! FTP Protocol Injection Bypass Palo Alto Firewall

Hi 

About  News SMTP over XXE attacks against Linux-based firewalls.

- link (https://www.bleepingcomputer.com/news/security/java-and-python-contain-security-flaws-that-allow-attackers-to-bypass-firewalls/)

How we can create custom signature or  disab

Resolved! User-ID. Is WMI really needed?

Hi all

I have an end-customer who is using ServerMonitoring and User-Id agent at the same time. His AD has been audited by Microsoft and discovered that their performance is affected by thew WMI probbing. My questions is. If they remove all ServerMon

Resolved! HA scenario questions?

Hi folks,

I am learning (self training at this point) about my company's two Palo Alto 3020 devices in our datacenter.  We are currently only using one device for our routing, firewall, etc.  I am tasked with eventually configuring the second one as

Resolved! O365: No Indicators, Miner not working

Hi,

we use Minemeld for grabbing the Microsoft Office 365 IP's and URL's. 

It run's on a VMWare Server, build with the "Full" .ova with Ubuntu & Minemeld.

The installation works fine. After importing the config "office365-config.yml" no indicator

Resolved! Single IP List

Just getting started with Minemeld - I noticed that even if a single IP feed is provided (e.g compromised IP list), the inboundfeedmc list still shows as an IP range, e.g 

It is possible to get jts a list of single IP addresse