"Whitelist" a brute force attack

Hi all,

we run a cron job from one intern server to another.

Because of this we get alerts in the threat tab and the threat tab is full of this. I don´t want to see this alerts anymore.

I create under Objects/vulnarebility protection/ a new profile:

In

Threat ID ranges definitions

Hello Threat Team,

Hope everyone is well today. We came across a Threat ID 6000400 which falls under an Antivirus Signature Range: SWFZWS: 6000000 - 6000500 (Ref: https://live.paloaltonetworks.com/t5/Threat-Vulnerability-Articles/Threat-ID-Ranges-in-

Vulnerability Protection Profile - Trigger Values in Exceptions

Hi,

I'm having trouble understanding how trigger value adjustments work in Vulnerability Protection Profiles when IP exemption lists are used.

I've looked online but not found anything that is 100% clear.

I've created a Vulnerability Protection Profile

Blocking malicious Java Script Web Attacks

I am seeing too many java script web attacks which are caught  by Symantec Endpoint Protection on my end users Workstations. Some of them are listed below.

Web Attack: Malicious Injected JavaScript 14
Web Attack: Fake Jquery Injection 2
Web Attack: Mas

Fireball Malware Detection

Hello,

Is there a specific Threat ID or someting else that I can use to identify which systems, if any, are infected with Fireball?

How to view the "Hits" of my Vulnerability Protection Rule

Hello Everyone,

I am quite new to PA, so i would need your suggestion about this.

I created a Vulnerability Protection Rule wherein my goal is once a Signature update arrives (Vulnerability signature), all those that are “Critical” would have an automa

URL in monitor Threat

Hi,

in threat monitor I have the column "URL".

Here I see only words like "php", "doSearch.do", "viewcmspage.action" but not the complete url like http://www.mydomain.com/index.php?target=999".

Why??

Please help me remove a virus

Hi there, new to the community here.

I have a Mac running OSX 10.12.4 and I've had this happen 3 times.

Computer lid was closed & should have been asleep.