PBF for Office 365

cancel
Showing results for 
Search instead for 
Did you mean: 

PBF for Office 365

L1 Bithead

Hi all,

 

One of our startegic customer is requesting the possibility to route just the O365 traffic to a specific link and after researching about this I think that the best is using MineMeld to automatically feed a list of application IP adrress but I did't find any documentation describing how to perform this.

 

Any of you have used the MineMeld to monitor the O365 address and imput this into PANW and can share some details with me?

 

Thank you and regards,

 

15 REPLIES 15

So just delete the nodes: entry and then cat file >> otherfile ?

yes, that should work :-)

 

So the fun part is it shows up in the nodes section, but not in the config. It does work and does pull the data down.

Aha I had to hit load. All good now.

 

Is that file the only thing you really need to restore the system should you have to reimage or rebuild?

All the information you need to rebuild the instance is stored under /opt/minemeld/local/config.

You may also want to backup local/data (after stopping minemeld-engine) if you want to save the current set of indicators.

Thanks for adding the ability to easily modify the config!  Cut and paste and all done.  Everything looks good so far! 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!