Threat & Vulnerability Discussions

Welcome to the Threat and Vulnerability Discussion Board

Welcome to the Threat and Vulnerability Forum

The purpose of this forum is to discuss security vulnerabilities and threats. Palo Alto Networks believes that understanding todays threat landscape is critical to effectively detecting and preventing cyb

...

Risk 0 for workday and service now.

Hi,

I noticed in our ACC dashborad that the applicaitons in use such as workday and servicenow were assigned a risk of 0. Is that becuase they have not been identified as risky apps or thats the lowest risk level which means no threat app.

Thank y

...

TCP SYN with data Threat logs

Hi Guys,

I receive hundreds of TCP SYN with data Threat Alerts from my BYOD zone every day. I was learning more about it and I understood that it is a TCP syn packet with data in its payload. However, as almost all of them seems to come from non-mali

...

Resolved! Dynamic IP List import now failed

I just have the two default PA dynamic IP lists, but they each only have roughly 100 IPs. I would think there would be more than that but when I try to hit 'import now' it just fails. Anyone shed some light on how these two lists work and how often

...

Completely puzzled - Unique Threat ID: 193986039

hi,

Did anyone had WildFire Threat events with the following Unique Threat ID: 193986039?

Threat Vault provided me the following information:

Signature Release Domain Name Type

Name: generic:ecompassesfarringdon.com

Unique Threat ID: 193986039

Create Ti

...

Threat & Vulnerability PA Vs FTD & Fortinet

Dear Team,

i want to need the difference between the Threat and Vulnerability detail as we have the PA 5000 Series box please share the solution difference which vendor have the most power full Threat and vulnerability solutions ?

Resolved! How does PA identity an application as "Threat"

Hello guys,

We have an application - "sina-weibo-base" is allowed to be accessed for internet access policy, but when user access to it, PA block it and the "Session End Reason" is "Threat".

Does this mean PA consider this application a threat?

Thank

...

Resolved! WildFire not Blocking File with 'malicious' Verdict

Hi,

I am playing in lab with wildfire and i would like to drop file downloads that are analyzed by wildfire as malicious verdict.

I have configured the follwong wildfire submission profile.

i created a wildfire profile (copy of the default)

admin@PA-220

...

Schermafbeelding 2018-03-06 om 17.20.14.png

Mass unsubscribe

I work for an email marketing company. We have a sender who sent out 3 separate emails blast to over 1 million contacts. They had a very high unsubscribe rate. After our engineering team looked at the logs, we see that all the unsubscribes happen

...

Resolved! IP blcoking on ip scan

I wonder if there is dynamic blocking IP if on short period of time that IP did ip scan or try the same vulnerability attack on our IP range, becuse the attack was once on each policy rule it doesn't reach the vulnerability protection limit for block

...

Resolved! Youtube risk

Hi guys.

In Palo Alto Firewall 7.1.8 version, Youtube-base application is categorized with risk 4, because is Used by Malware and Has Known Vulnerabilities. I try to search for information about it but I couldn't find it yet. There is some informatio

...