About _slv_

Here You are report from today (SEP): Wykryto zagrożenie Czas zdarzenia: 19.04.2014 17:33:03 Czas rozpoczęcia: 19.04.2014 17:32:02 Czas zakończenia: 19.04.2014 17:32:02 Wystąpienie: 1 Nazwa sygnatury: Web Attack: Red Exploit Kit Redirect 2 Identyfikator sygnatury: 26591 Podidentyfikator sygnatury: 71083 Adres URL włamania: www.bourgelat.net/ Adres URL zawartości włamania: N/D Opis zdarzenia: [Identyfikator SID: 26591] zablokowano atak Web Attack: Red Exploit Kit Redirect 2. Zablokowano ruch tej aplikacji: \DEVICE\HARDDISKVOLUME2\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE Typ zdarzenia: Zapobieganie włamaniom Typ hakingu: 0 Istotność: Krytyczne Nazwa aplikacji: /DEVICE/HARDDISKVOLUME2/PROGRAM FILES/MOZILLA FIREFOX/FIREFOX.EXE Protokół sieciowy: TCP Kierunek ruchu sieciowego: Przychodzący Adres IP komputera zdalnego: 91.121.93.111 Zdalny adres MAC: N/D Nazwa hosta zdalnego: N/D Alert: 1 Port lokalny: 55038 Port zdalny: 80 is it a false positive? Regards Slawek ... View more

I can't verify it now, but probably - yes. Today "www.bourgelat.net/cannot-patch-definitions-vmware-19988" isn't accessable but please try with www.bourgelat.net  Please try with it. I will check my security rules, but I'm sure that I blocing medium and critical threats. Regards SLawek ... View more

Hello Hulk There is nothing special: Could You tell me how to get it from CLI? How to get system log from ie. 16.04.2014 8:00 +/-10minuts? Regards Slawek ... View more

In my opinion you are facing NAT problems. Please read about U-turn policies (You need U-turn policies that will allow traffic from Guest VLAN to your serwers in DMZ 10.29.250.XXX) i.e. https://live.paloaltonetworks.com/docs/DOC-1678 With regards Slawek ... View more

no no, upgrade I did on 4.04.2014, unexpected restart was on 16.04.2104. ... View more

My symantec endpoint pretection is detecting that this site try to attact my computer using "red export kit redirect" now. ... View more

small update, www.bourgelat.net is classified as malware site by BightCloud Service, and it's blocked if You are blocking access by url filter (block malware sites) but if you are using PA url database you are under risk! ... View more

from 6.0.1-2 tech note https://downloads.paloaltonetworks.com/software/User-ID_Agent-6.0.1-RN.pdf?__gda__=1397676798_23c31b2f09e0be1f6752060ff1… Operating System (OS) Compatibility User-ID Agent 6.0 The following table lists the supported operating systems for the User-ID Agent: Host Computers • Microsoft Windows XP/Vista/7 • Microsoft Windows Server 2003/2003 R2 • Microsoft Windows Server 2008/2008 R2 Regards Slawek ... View more

Thx, so I will waiting for 431 update. ... View more

Hi Simon Please create dedicated AD user for PAN very carefully according to manual of User-ID, this part is very important, also configuration of domain controllers (rights for this user). Reagrds Slawek ... View more

Yes, but why You think about other posibilities if You are using Microsoft AD? Radius/Kerberos IMHO is dedicated in tother scenario. Regards Slawek ... View more

Hi I recomendate to start from https://live.paloaltonetworks.com/docs/DOC-6591 I'm using agent User-id like most of us, so for start I recomendate this option. Regards Slawek ... View more