About Sly_Cooper

Is there any way to know how many files were uploaded to wildfire portal? ... View more

Is possible to block all SSL versions and configure TLS only access? ... View more

I have vulnerability profile with action for High severity signatures as "alert".  I then configured an exception for SSH Brute Force (ID 40015) as "block-ip, src and dst (30 mins)". Everything worked well until we had issues for the systems exiting from our own network and we had to provide an exception for our egress ip. We then added IP address exception under the signature matching our egress ip. Post this the signature stopped blocking SSH brute force attempts for rest of the world. Can someone please help me understand behavior of IP exception in this case? I need SSH brute force signature work for all ip addresses except my company's egress ip. ... View more

I would like to create ipv4 output based on the aws ec2 and route 53 miners. I cloned miners, aggregator and output from prototypes. When I hit commit nothing happens. I can see the processes stopped under System. If I hit restart for the engine, I get Internal Server Error. I already tried by rebooting the server and tried the same. I have attached engine.log file. ... View more

Hi,   We have few use cases around dynamically block list (dynamic update for us) however we would like to use it to identify and "allow" apps rather than "block". Considering it is just a group with objects which are dynamically populated based on url, i think it will work. We would like to provide ssh-proxy exception based on the dbl. Strangly even afer exception policy, the firewall was decrypting the traffic. There was no policy above this policy to match destination. I moved to the policy on the top and it started working. Now I added one more external block list group in the same policy, and the firewall started decrypting traffic. Any suggestions ... View more