ProxyGate.net

Tips appreciated on how to identity and potentially block proxygate.net clients on a campus network.  Proxygate is not necessarily a benign tool. Bad actors can look for proxygate clients embedded on networks and use them to get a foothold on the net

Request to add to PA curated IP lists?

Is there a way to request IPs are added to curated IP lists?  Or is there a preferred dynamic list of IP abusers that you use with your PA?  

Thanks very much for your assistance.  Please forgive me, I am new to Palo Alto.

file blocking by size

How to block download file by size os 9.1 ??

Unable to resolve internal url's after implementing dns security.

I only would like to know if we add *.domain.in in External dynamic list and if we call that EDL in Antispyware profile with action Alert, then EDL will take preference with alert action and exclude it or DNS security will take preference with sinkho

It's possible to block custom file hash-256 in Palo alto.

It's possible to block custom file hash-256 in Palo alto.

Please let me know how I can check the respective file hashes disposition at a wildfire, either it is in block or not.

Here is below the file hashes need to know for disposition.

• f743c0849d69b5

MineMeld sweet32/upgrade?

Getting sweet32 detected on mindmeld server. Trying and failing to update.

What is update process for Ubuntu 16.04.6 LTS ?

login screen:

141 packages can be updated.
91 updates are security updates.

New release '18.04.3 LTS' available.
Run 'do-release-upg

Poor performance when applying TP license

Performance decrease occurs when TP license is applied
I would like to know how much performance degradation occurs on PA-850, 3020, 3050, 5020 equipment.
(Is it over -50%?)

Security LifeCycle Review Flagging Unknown Binary as High Risk FileTypes

Hello All,

Can anybody in the group share their experience/Knowledge over Unknown binaries? As I am observing my Security control flagging Unknown Binaries as a High-Risk filetype. I just need to know what actually these unknown binaries are ? for wha

Microsoft Directory Services/ms-ds-smbv3 - Virus/Win32.WGeneric.yurld?

We are see numerous alarms from our SIEM from our Palo Alto firewall. Here is a copy of a scrubbed log message below. When asking the user about their activity, they only RDP'ed into various servers from their laptop via the Globalprotect VPN for rem

Wildfire is allowed to dynamic analysis for File Type Unknown Extention

Threat 109020001 detection, dropping LAN traffic after 10.0.0 upgrade

After upgrading from v9.1.3 to v10.0.0, I'm seeing detections for 109020001 (newly registered domain) for traffic to/from addresses in a private class C subnet.  It's also taking a drop action.

I can't find the signature in vulnerability profiles to

Block VPN for School Students

Good afternoon 

I'm hoping someone might have an answer for me. I'm trying to see if there is a way to block any traffic coming from a Student IPad or Laptop when they try and use a VPN Client or more so a VPN Add-On in Firefox or Chrome. I'm hoping