About ethiSEC

Depending on what you need the EDL hosting service may be a better option:   https://docs.paloaltonetworks.com/resources/edl-hosting-service ... View more

As @vsys_remo said you need to set the action to alert. I generally have a URL filtering profile called URL-Alert where most actions are alert so I can monitor what's going on. I find this is very helpful when trying to build a tighter policy as the URL filtering engine allows you to see most FQDNs that are being requested.   Even on an alert profile I always set categories such as phishing, c2, malware et al to block as a layer of protection.     ... View more

There's always a chance that something will break with App-ID if a vendor changes things on their side as I'm pretty sure they don't ring each NGFW vendor and say here are the changes to our app, better modify your application signature.     On occasion, PAN will be aware of the changes and will make a note of upcoming changes in the weekly release notes. If you don't receive the release notes via email I'd suggest you add them to your profile as they can help minimise App-ID related issues, provided you keep tabs on documented changes.   ... View more

It's very useful to tag the apps appropriately when you run reports e.g. the SaaS report. It helps highlight unusual applications when you're migrating or monitoring network traffic, it's not just for management security people can make use of the information too.   Jason ... View more

Sometimes this appears to be related to the TLS version configured on your MineMeld web server. For some strange reason, the PAN FW will only make the request to the webserver using TLS 1.0 and nothing higher.   If you see issues where the URL is unavailable or an access error check to see if TLS 1.0 is disabled.   A quick PCAP on. the MGT interface will show you what it's trying to negotiate.   tcpdump filter 'host your_dst_IP'   Jason ... View more

PAN Configurator is a simple tool you can use to perform bulk edits, it's available from here:   https://github.com/cpainchaud/pan-configurator/tree/master/utils   It's quite easy to use on Mac, Linux or Windows.   Jason ... View more

BPry offers some good advice, if you don't need the features it's often better not to upgrade. Having said that though, I've been running 9.0 for a while without issue, however, the configuration on the firewall is very simple, straightforward APP-ID enabled firewall policy.   Jason ... View more

PAN used to offer advice on Recommended releases, recently this changed to Preferred releases.   9.0.1 has a P* status which means it's a preferred release with additional notes. I'd suggest you ask the TAC for guidance on this as there may be some issues that will cause problems, but it looks like it may be a viable release for you early on its life.   Sometimes you may need to upgrade to a newer, less stable release if you require features. You may need to live with some minor issues though if you do upgrade.   Jason     ... View more

@lmori nope, just a plain old linux box sitting on the Internet. It's running on a KVM hypervisior, I wonder if that's creating some problems?   Jason ... View more

@PavtrickAussems, I've tried 14.04 and CentOS 7 with the exact or similar result. Sudo settings all look OK, but I'll have a better look at this to see if I can see anything.   It's a Vultr VM which isn't behind a firewall, so nothing should be being blocked. The VM is I'm assuming a pretty vanila Ubuntu server build with the necessary dependancies installed.   If I get time tomorrow, I'll see if it installs on another VM on my internal network. It's a tad frustrating that it won't install, hopefully I'll resilve this shortly.   Jason   ... View more

I just checked out the code again and tried to reinstall with the same issue.   Any ideas?       ... View more

Hi, this is exactly the process I followed, still see this issue though. How long ago do you run the installer? ... View more

Tried that too, same or similar issue.    Just realised the output is being truncanted and can be view, this is the error I've seen :   TASK [minemeld : typings install] ******************************************************************************************************************************************* changed: [127.0.0.1]   TASK [minemeld : nsp check] ************************************************************************************************************************************************* changed: [127.0.0.1]   TASK [minemeld : gulp build] ************************************************************************************************************************************************ fatal: [127.0.0.1]: FAILED! => {"changed": true, "cmd": ["gulp", "build"], "delta": "0:00:23.604171", "end": "2018-11-15 00:48:16.860538", "msg": "non-zero return code", "rc": 1, "start": "2018-11-15 00:47:53.256367", "stderr": "", "stderr_lines": [], "stdout": "[00:47:54] Using gulpfile /opt/minemeld/www/webui/gulpfile.js\n[00:47:54] Starting 'scripts'...\n[00:47:55] Starting 'styles'...\n[00:47:55] 'styles' errored after 74 ms\n[00:47:55] Error: ENOENT: no such file or directory, scandir '/opt/minemeld/www/webui/node_modules/node-sass/vendor'\n     at Error (native)\n     at Object.fs.readdirSync (fs.js:961:18)\n     at Object.getInstalledBinaries (/opt/minemeld/www/webui/node_modules/node-sass/lib/extensions.js:121:13)\n     at foundBinariesList (/opt/minemeld/www/webui/node_modules/node-sass/lib/errors.js:20:15)\n     at foundBinaries (/opt/minemeld/www/webui/node_modules/node-sass/lib/errors.js:15:5)\n     at Object.module.exports.missingBinary (/opt/minemeld/www/webui/node_modules/node-sass/lib/errors.js:45:5)\n     at module.exports (/opt/minemeld/www/webui/node_modules/node-sass/lib/binding.js:15:30)\n     at Object.<anonymous> (/opt/minemeld/www/webui/node_modules/node-sass/lib/index.js:14:35)\n     at Module._compile (module.js:577:32)\n     at Object.Module._extensions..js (module.js:586:10)\n[00:47:55] gulp-inject 16 files into index.scss.\n[00:48:16] Time: 20861ms\n           Asset     Size   Chunks             Chunk Names\nindex.module.js   1.8 MB       0   [emitted]   main\n\nWARNING in ./src/app/nodedetail/localdb.controller.ts\n[501, 9]: for (... in ...) statements must be filtered with an if statement\n[67, 30]: expected parameter: 'result' to have a typedef\n[97, 30]: expected parameter: 'result' to have a typedef\n[365, 53]: expected parameter: 'key' to have a typedef\n[476, 49]: expected parameter: 'key' to have a typedef\n\n\nWARNING in ./src/app/nodedetail/yamlipv4.controller.ts\n[449, 29]: forbidden bitwise operation\n\n\nWARNING in ./src/app/nodedetail/credentials.controller.ts\n[397, 63]: missing semicolon\n\n\nWARNING in ./src/app/nodedetail/nodedetail.info.controller.ts\n[90, 5]: Declaration of public instance member function not allowed to appear after declaration of private instance member function\n\n\nWARNING in ./src/app/nodedetail/proofpoint.controller.ts\n[270, 24]: != should be !==\n\n\nWARNING in ./src/app/nodedetail/recordedfuture.controller.ts\n[138, 24]: != should be !==\n\n\nWARNING in ./src/app/nodedetail/taxiiclient.controller.ts\n[111, 65]: == should be ===\n\n\nWARNING in ./src/app/dashboard/dashboard.controller.ts\n[173, 19]: comment must start with lowercase letter\n\n\nWARNING in ./src/app/system/system.controller.ts\n[105, 34]: == should be ===\n[125, 34]: == should be ===\n[150, 34]: == should be ===\n[199, 34]: == should be ===\n\n\nWARNING in ./src/app/system/extensions.controller.ts\n[528, 15]: comment must start with lowercase letter\n[416, 56]: == should be ===\n[509, 30]: == should be ===\n\n\nWARNING in ./src/app/config/config.controller.ts\n[205, 34]: == should be ===\n[205, 68]: == should be ===\n[610, 37]: == should be ===\n[633, 28]: == should be ===\n[726, 32]: == should be ===\n\n\nWARNING in ./src/app/config/configimport.controller.ts\n[403, 9]: for (... in ...) statements must be filtered with an if statement\n\n\nWARNING in ./src/app/config/configadd.controller.ts\n[111, 59]: == should be ===\n[157, 24]: == should be ===\n[187, 25]: == should be ===\n[194, 31]: == should be ===\n\n\nWARNING in ./src/app/admin/admin.users.controller.ts\n[59, 13]: unused variable: 'lastUser'\n[68, 31]: == should be ===\n\n\nWARNING in ./src/app/indicatoradd/indicatoradd.controller.ts\n[188, 29]: forbidden bitwise operation\n\n\nWARNING in ./src/app/services/minemeldapi.ts\n[197, 20]: == should be ===\n\n\nWARNING in ./src/app/services/status.ts\n[320, 12]: trailing whitespace\n\n\nWARNING in ./src/app/services/prototype.ts\n[16, 28]: comment must start with lowercase letter\n\n\nWARNING in ./src/app/services/events.ts\n[110, 63]: == should be ===\n\n\nWARNING in ./src/app/services/traced.ts\n[224, 21]: forbidden bitwise operation\n[226, 38]: forbidden bitwise operation\n[226, 38]: forbidden bitwise operation\n\n\nWARNING in ./src/app/services/enginestatus.ts\n[85, 50]: != should be !==\n[111, 30]: != should be !==\n\n\nWARNING in ./src/app/services/jobs.ts\n[122, 35]: != should be !==\n[126, 39]: != should be !==\n\n\nWARNING in ./src/app/services/currentuser.ts\n[51, 30]: == should be ===\n\n\nWARNING in ./src/app/components/navbar/navbar.directive.ts\n[79, 28]: != should be !==\n[84, 45]: != should be !==\n\n\nWARNING in ./src/app/components/suggestion/suggestion.directive.ts\n[31, 9]: 'toastr' cannot be declared in the constructor\n[32, 9]: '$modal' cannot be declared in the constructor\n[93, 17]: '$modalInstance' cannot be declared in the constructor\n[58, 19]: expected parameter: 'result' to have a typedef\n[60, 28]: expected parameter: 'success' to have a typedef\n[63, 26]: expected parameter: 'error' to have a typedef\n[75, 19]: expected parameter: 'result' to have a typedef\n\n[00:48:16] Finished 'scripts' after 21 s", "stdout_lines": ["[00:47:54] Using gulpfile /opt/minemeld/www/webui/gulpfile.js", "[00:47:54] Starting 'scripts'...", "[00:47:55] Starting 'styles'...", "[00:47:55] 'styles' errored after 74 ms", "[00:47:55] Error: ENOENT: no such file or directory, scandir '/opt/minemeld/www/webui/node_modules/node-sass/vendor'", "     at Error (native)", "     at Object.fs.readdirSync (fs.js:961:18)", "     at Object.getInstalledBinaries (/opt/minemeld/www/webui/node_modules/node-sass/lib/extensions.js:121:13)", "     at foundBinariesList (/opt/minemeld/www/webui/node_modules/node-sass/lib/errors.js:20:15)", "     at foundBinaries (/opt/minemeld/www/webui/node_modules/node-sass/lib/errors.js:15:5)", "     at Object.module.exports.missingBinary (/opt/minemeld/www/webui/node_modules/node-sass/lib/errors.js:45:5)", "     at module.exports (/opt/minemeld/www/webui/node_modules/node-sass/lib/binding.js:15:30)", "     at Object.<anonymous> (/opt/minemeld/www/webui/node_modules/node-sass/lib/index.js:14:35)", "     at Module._compile (module.js:577:32)", "     at Object.Module._extensions..js (module.js:586:10)", "[00:47:55] gulp-inject 16 files into index.scss.", "[00:48:16] Time: 20861ms", "           Asset     Size   Chunks             Chunk Names", "index.module.js   1.8 MB       0   [emitted]   main", "", "WARNING in ./src/app/nodedetail/localdb.controller.ts", "[501, 9]: for (... in ...) statements must be filtered with an if statement", "[67, 30]: expected parameter: 'result' to have a typedef", "[97, 30]: expected parameter: 'result' to have a typedef", "[365, 53]: expected parameter: 'key' to have a typedef", "[476, 49]: expected parameter: 'key' to have a typedef", "", "", "WARNING in ./src/app/nodedetail/yamlipv4.controller.ts", "[449, 29]: forbidden bitwise operation", "", "", "WARNING in ./src/app/nodedetail/credentials.controller.ts", "[397, 63]: missing semicolon", "", "", "WARNING in ./src/app/nodedetail/nodedetail.info.controller.ts", "[90, 5]: Declaration of public instance member function not allowed to appear after declaration of private instance member function", "", "", "WARNING in ./src/app/nodedetail/proofpoint.controller.ts", "[270, 24]: != should be !==", "", "", "WARNING in ./src/app/nodedetail/recordedfuture.controller.ts", "[138, 24]: != should be !==", "", "", "WARNING in ./src/app/nodedetail/taxiiclient.controller.ts", "[111, 65]: == should be ===", "", "", "WARNING in ./src/app/dashboard/dashboard.controller.ts", "[173, 19]: comment must start with lowercase letter", "", "", "WARNING in ./src/app/system/system.controller.ts", "[105, 34]: == should be ===", "[125, 34]: == should be ===", "[150, 34]: == should be ===", "[199, 34]: == should be ===", "", "", "WARNING in ./src/app/system/extensions.controller.ts", "[528, 15]: comment must start with lowercase letter", "[416, 56]: == should be ===", "[509, 30]: == should be ===", "", "", "WARNING in ./src/app/config/config.controller.ts", "[205, 34]: == should be ===", "[205, 68]: == should be ===", "[610, 37]: == should be ===", "[633, 28]: == should be ===", "[726, 32]: == should be ===", "", "", "WARNING in ./src/app/config/configimport.controller.ts", "[403, 9]: for (... in ...) statements must be filtered with an if statement", "", "", "WARNING in ./src/app/config/configadd.controller.ts", "[111, 59]: == should be ===", "[157, 24]: == should be ===", "[187, 25]: == should be ===", "[194, 31]: == should be ===", "", "", "WARNING in ./src/app/admin/admin.users.controller.ts", "[59, 13]: unused variable: 'lastUser'", "[68, 31]: == should be ===", "", "", "WARNING in ./src/app/indicatoradd/indicatoradd.controller.ts", "[188, 29]: forbidden bitwise operation", "", "", "WARNING in ./src/app/services/minemeldapi.ts", "[197, 20]: == should be ===", "", "", "WARNING in ./src/app/services/status.ts", "[320, 12]: trailing whitespace", "", "", "WARNING in ./src/app/services/prototype.ts", "[16, 28]: comment must start with lowercase letter", "", "", "WARNING in ./src/app/services/events.ts", "[110, 63]: == should be ===", "", "", "WARNING in ./src/app/services/traced.ts", "[224, 21]: forbidden bitwise operation", "[226, 38]: forbidden bitwise operation", "[226, 38]: forbidden bitwise operation", "", "", "WARNING in ./src/app/services/enginestatus.ts", "[85, 50]: != should be !==", "[111, 30]: != should be !==", "", "", "WARNING in ./src/app/services/jobs.ts", "[122, 35]: != should be !==", "[126, 39]: != should be !==", "", "", "WARNING in ./src/app/services/currentuser.ts", "[51, 30]: == should be ===", "", "", "WARNING in ./src/app/components/navbar/navbar.directive.ts", "[79, 28]: != should be !==", "[84, 45]: != should be !==", "", "", "WARNING in ./src/app/components/suggestion/suggestion.directive.ts", "[31, 9]: 'toastr' cannot be declared in the constructor", "[32, 9]: '$modal' cannot be declared in the constructor", "[93, 17]: '$modalInstance' cannot be declared in the constructor", "[58, 19]: expected parameter: 'result' to have a typedef", "[60, 28]: expected parameter: 'success' to have a typedef", "[63, 26]: expected parameter: 'error' to have a typedef", "[75, 19]: expected parameter: 'result' to have a typedef", "", "[00:48:16] Finished 'scripts' after 21 s"]} to retry, use: --limit @/root/minemeld-ansible/local.retry   PLAY RECAP ****************************************************************************************************************************************************************** 127.0.0.1                   : ok=59   changed=12   unreachable=0     failed=1     ... View more