WildFire analysis report rabbit images

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Palo Alto Networks Approved
Palo Alto Networks Approved
Community Expert Verified
Community Expert Verified

WildFire analysis report rabbit images

L2 Linker

Dear Team,

 

When my client clicks on the WildFire analysis reprot, they see the rabbit image as shown below.

 

CHOEKyungJun_0-1656037901157.png


Has anyone had the same experience as me?

 

I would like to know the cause of the symptom and how to solve it.

 

Thanks in advance,
Kyungjun,

1 ACCEPTED SOLUTION

Accepted Solutions

If it is not a custom error page in the browser, then it must be a custom error page in the PaloAlto. But I would suspect the browser first. In the PaloAlto custom error/blocked pages can be setup from:

   Device -> Response Pages

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/device/device-response-pages

 

However, changing the response page is not going to fix the problem. It is a web coding error in the page that causes a security block. The Wildfire Analysis Report tab is an iframe within the Wildfire Monitor page and the HTML explicitly blocks iframes.

 

This is known PaloAlto bug PAN-183826 which affects PANOS multiple versions. There are recently released fixes for the bug in versions:

  9.1.14

  10.0.9

  10.1.??? - No fix yet? Not listed in release notes.

  10.2.1

 

There is a workaround which is to extract the URL to the iframe and copy/paste it into a new browser window. From your PaloAlto, right click in the Wildfire Analysis Report tab and select "View frame source".

2022-06-25_113401.png

 

Then edit the URL in the new window to remove the "view-source:".

2022-06-25_113441.png

 

Then you can see the report.

2022-06-25_114035.png

 

 

View solution in original post

4 REPLIES 4

L4 Transporter

There is currently a bug in the Wildfire Analysis Report tab that causes a "refused to connect" error when trying to view the report. It is caused by an iframe permissions problem in the PA web coding, which is fixed in the most recent PANOS release.

https://live.paloaltonetworks.com/t5/threat-vulnerability-discussions/wildfire-reports-refuse-to-con...

 

It looks like your client has configured a custom browser error page, using a "rabbit" background image instead of the default "sad page" image. Can you confirm with them that they made this custom change?

2022-06-24_095135.png

Hello Team, the image is not configured in the default browser. It looks like this in all browsers, is there a workaround? Do you have any images with bug fixes?

If it is not a custom error page in the browser, then it must be a custom error page in the PaloAlto. But I would suspect the browser first. In the PaloAlto custom error/blocked pages can be setup from:

   Device -> Response Pages

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/device/device-response-pages

 

However, changing the response page is not going to fix the problem. It is a web coding error in the page that causes a security block. The Wildfire Analysis Report tab is an iframe within the Wildfire Monitor page and the HTML explicitly blocks iframes.

 

This is known PaloAlto bug PAN-183826 which affects PANOS multiple versions. There are recently released fixes for the bug in versions:

  9.1.14

  10.0.9

  10.1.??? - No fix yet? Not listed in release notes.

  10.2.1

 

There is a workaround which is to extract the URL to the iframe and copy/paste it into a new browser window. From your PaloAlto, right click in the Wildfire Analysis Report tab and select "View frame source".

2022-06-25_113401.png

 

Then edit the URL in the new window to remove the "view-source:".

2022-06-25_113441.png

 

Then you can see the report.

2022-06-25_114035.png

 

 

L2 Linker

@Adrian_Jensen your answer has been of great help to me. Thank you sincerely.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!