- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
03-05-2024 02:14 PM
this just started popping up for DNS queries inside going outbound, my PA440 is dropping the packets as a spyware threat. This is quite a new development, probably last 24 hours.
Example action below:
name-of-threatid eq 'generic:com.fresh.fmb.la'
anyone seen this before? I can't find anything on a Google nor a LiveCommunity search.
-Jeff
03-06-2024 10:53 AM
Hi @jbankstonfla ,
I'm unable to find info regarding this as well. I'll reach out internally to see if I can find answers for you.
03-11-2024 08:16 AM
Yes, I'm seeing this too. Appears to trigger when hitting via google dns on port 53, but the site is actually https://fmb.la Looks like curated Blocking list that Paloalto may be using from one of their Dynamic lists. I'll post more info in a bit.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!