This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences

About cramman

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
cramman
‎11-17-2021
since ‎04-26-2011
L2 Linker
User Activity
User Profile
Latest posts by cramman
View All
User Badges
Community Statistics
Member Since ‎04-26-2011 10:41 AM
Date Last Visited ‎11-17-2021 02:44 PM
Posts 23
Total Likes Received 6

Re: Log forwarding profile in all security policies

by in General Topics
‎05-30-2018 09:07 AM
2 Kudos
‎05-30-2018 09:07 AM
2 Kudos
Haven't seen this answer yet so needed to reply..   Migration Tool!!!    (or Expedition as it's called now)    This is one of the best things about the tool - batch rule changes.   Setting Security Profiles on all rules, Log Forwarding, etc   Connect the FW (or Panorama) to the Migration Tool, ingest policies, multi-rule edit, then API push the rules back to Firewall. Validate policies.   Commit!   c ... View more

Re: Free wildfire

by in General Topics
‎09-11-2015 08:08 AM
‎09-11-2015 08:08 AM
SSL decrypt does not require a license.   can you post your FileBlocking profile config and show where's applied to the security policy? Then, as others have request, show us the traffic monitor for the file download session in question.   This type of configuration is something we do on a regular basis for hungreds of clients.   c ... View more

Re: SSL decryption and AppID

by in General Topics
‎09-02-2015 10:02 AM
1 Kudo
‎09-02-2015 10:02 AM
1 Kudo
i'm not sure i understand your rationale.   if you enable web-browsing and "application-default" then plaintext html based traffic will be allowed on port 80 and 8080.   if you don't want unencrypted traffic to the target server, don't allow it.     ... View more

Re: How to configure the blocking period for a bruteforce vulnerability

by in General Topics
‎09-02-2015 09:56 AM
1 Kudo
‎09-02-2015 09:56 AM
1 Kudo
is this what you are looking for?   https://live.paloaltonetworks.com/t5/Threat-Articles/How-to-Block-A-Threat-For-a-Specific-Time-Interval/ta-p/58181 ... View more

Re: Any luck with 7.0.2 out in the field?

by in General Topics
‎09-02-2015 09:25 AM
‎09-02-2015 09:25 AM
from what i understand there is an odd issue with SSL decrypt that is keeping me away for now:   https://live.paloaltonetworks.com/t5/Discussions/PAN-OS-7-0-2-SSL-Decryption-certficate-untrust-issues-No-problem/m-p/63856#U63856     ... View more

Re: Delete all Address Objects

by in General Topics
‎09-01-2015 09:40 AM
‎09-01-2015 09:40 AM
just make sure you are using a real editor like Notepad++ or SublimeText   XML is your friend! ... View more

Re: Delete all Address Objects

by in General Topics
‎09-01-2015 09:23 AM
‎09-01-2015 09:23 AM
(duplicate - bmorris1 beat me by 36secs - i must be slipping..)    - export the config in XML - delete the objects section - import the config back into the firewall, load, commit.   no, it's not a checkbox but it's doable in under 5mins.   c ... View more

Re: Wildfire .ace archive support

by in General Topics
‎08-24-2015 05:04 PM
1 Kudo
‎08-24-2015 05:04 PM
1 Kudo
there's no support for ACE in File Blocking or Data filtering profiles. ACE is a proprietary format that needs to be licensed from GmbH.   Data Filtering only supports zip/gzip compression formats.   Apologies as i'm sure you already knew all of this.     ... View more

Palo Alto Networks Content Updated email fail

by in General Topics
‎04-07-2015 05:39 PM
‎04-07-2015 05:39 PM
That i just received April 7th lists all the other "Chris's" that subscribe to these updates in the CC field. My teammates received the same with all other PAN users that shared their names. With about 100 carefully selected names we could build almost the entire PAN user directory and emails.  Ouch What gives? c ... View more
Labels:

Re: OpenSSL Heartbleed bug: CVE-2014-0160

by in General Topics
‎04-08-2014 05:16 AM
1 Kudo
‎04-08-2014 05:16 AM
1 Kudo
likewise - are the PAN devices using OpenSSL under the hood for cert creation? If so, which vers? I know many of our F5s are "safe" as they run 0.9.8x Any plans on releasing an update to patch CVE-2014-0160 exploits? ... View more

Re: how to limit file size downloading and uploading

by in General Topics
‎02-22-2014 02:13 PM
‎02-22-2014 02:13 PM
can you post your Vuln rule as an example? thanks! ... View more
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎11-17-2021 02:44 PM
Latest Tags
No tags yet
Likes Given To
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks