MineMeld - Office 365 - How can I disable miners?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

MineMeld - Office 365 - How can I disable miners?

L3 Networker

I am working on Office 365 control and I have discovered that MineMeld seems to be the best way to do this.  To that end, I have set up a MineMeld server and imported the PAN-provided script for Office 365.

 

There are some Office 365 features that we do not want to allow at this time, such as OneNote, SharePoint Online, and Yammer.  I see that I can delete nodes, but what if I want to use them in the near future?  Is there some way to just disable a miner but otherwise leave it available for use?  I see that the details of one of the nodes including a label next to "Output" that says "Enabled", but I don't see any way to disable it other than deleting it.


Or should I just let MineMeld do its thing and use the Office 365 App-IDs in the PAN firewall to control the access?

1 accepted solution

Accepted Solutions

L5 Sessionator

@scottsander : What about removing the miners you do not want to use from the list of "inputs" in the corresponding processors?

 

temp.png

View solution in original post

3 REPLIES 3

L5 Sessionator

@scottsander : What about removing the miners you do not want to use from the list of "inputs" in the corresponding processors?

 

temp.png

That looks like it will work.  The interface doesn't make it obvious that you can do that.  A simple enable/disable switch on miners, processors, and outputs would probably be better, but this will work in leiu of such a feature.


Thanks!

This does not seem to stop the miner polling (and throwing errors if the remote TAXII server is temporarily offline).   Is there a way to pause polling?

  • 1 accepted solution
  • 6039 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!