Threat & Vulnerability Discussions
cancel
Showing results for 
Search instead for 
Did you mean: 
Threat & Vulnerability Discussions
About Threat & Vulnerability Discussions

Welcome to the Threat and Vulnerability discussion forum. This forum exists as a resource for security professionals to discuss and share information pertaining to the topics of threats and vulnerabilities.
Not a LIVEcommunity member? Simply click here and register!

Discussions

Wildfire reports refuse to connect

Hi Team, 

 

We are facing an error in wildfire reports after updagrade to 10.0.8h4 . it says wildfire reports refuse to connect.

 

Please suggest any solution  to check but if i updgrade to 10.1.3 it is working fine in mylab.

 

Regards

Chetan

ChetanR by L0 Member
  • 1225 Views
  • 8 replies
  • 1 Likes

Memory Corruption Exploit

Good day,

 

This may be a silly question we have been getting memory corruption exploit Alerts from a certain endpoint. Client does see them as cause for concern.

On a single end point would it be cause for concern to see multiple memory corruption expl

...

aadamb by L0 Member
  • 88 Views
  • 0 replies
  • 1 Likes

How to detect domain fronting

Hi,

 

did anyone manage to write a custom signature to detect domain fronting?

PA extracts the Host header, so in theory it should be possible to detect if the Host header is different from the URL?

 

Alternatively, if one could log the Host header one co

...

AndreasB by L2 Linker
  • 5158 Views
  • 2 replies
  • 0 Likes

Unit42 STIX 2.0 feeds

I'm running my own Anomali STAXX server. I'm trying to ingest these Unit 42 feeds.  Do they still exist? The page is still up and I registered and created my API keys. No matter what I try to do, I can't get Anomali STAXX to connect. https://stix2.un

...

ingerl by L0 Member
  • 349 Views
  • 1 replies
  • 1 Likes

PAN DB vs Advanced

Hello ,

 

Just want to know if PAN-DB and Advanced URL are different licensing

 

If Advanced URL is purchased , does it cover PAN-DB

 

We have a customer who puchased Advanced URL  , but not PAN DB

 

 

policy, objects and smtp

howdy,

I can not get my head around how to do this.

Allow smtp from a country but block every other service, application.

You can negate countries but not services/applications.

can one do any/any with an exception?

Thank you

PA200-1 by L1 Bithead
  • 532 Views
  • 3 replies
  • 1 Likes