About dyang

dyang · ‎03-24-2014

Hi NPTECH, In addition to what Phoenix mentioned above, YouTube Safety Mode is also supported, although you need to make sure your content is at version 422 or later. --Doris

dyang · ‎03-24-2014

Hi everyone, For those of you that are receiving this error, can you please verify that you're only seeing this error in the logs but are not experiencing any issues with the daily database update or any other connectivity errors? During the time that you see this error, are any of you seeing category "not-resolved" in the URL filtering logs? Thanks, Doris

dyang · ‎03-06-2014

Hi markk96, What you can do is use response pages for URL category "web-based email" with action set to "continue" and customize the page such that it contains the text of your company policy. By default, once the end-user clicks OK, they have access to any URL within that category for 15 minutes; this period is configurable. For more information regarding how you can customize response pages, please refer to the following article: Customizing Response Pages Hope this helps, Doris

dyang · ‎02-27-2014

Hi G.A., While we do have the information on why a particular URL/IP has been categorized as malware, it is not something that we are currently able to include in our automated email responses for change requests. This integration is something that we're working on so that we can help provide more detail and context to our customers. In the meantime, if you would like more information, please feel free to forward your question through your SE, or you can always submit your questions via the comments section in a submission. Thanks, Doris

dyang · ‎02-26-2014

Hi G.A., When our threat prevention team analyzes malware samples, it takes note of where the malware was hosted and what it was attempting to connect to. This helps us gather information about what is infected and any possible related hosts, C&C, etc. As Jahnavi mentioned above, if a URL/IP is categorized as malware in PAN-DB, it does not necessarily mean that the URL/IP in question is hosting malware, but it could be part of a network associated with a specific malicious attack. If you suspect that a URL/IP has been miscategorized as malware, you can always request a change via our PAN-DB site: Palo Alto Networks URL Filtering - Test A Site . Feel free to add your comments in your submission, and the team will take a look. Hope this helps, Doris

dyang · ‎01-28-2014

Hi everyone, Just an FYI that PAN-OS 6.0, which was released last week, contains some functionality to accommodate Google SafeSearch. When the URL filtering profile setting "Enforce SafeSearch" is enabled, PAN-OS will look at all search queries for supported search engines (Google, Yahoo and Bing, for now) and check that they are at the strictest setting. If it is not, then a block page is displayed along with a link to the appropriate search engine's settings so that end-users can adjust their settings accordingly. This will ensure that only searches at the proper setting will go through, and will also educate end-users on what they need to do to remedy the situation. As always, for those of you seeking an alternate solution or support for an alternate feature, please contact your SE so that your feedback is properly noted. Thanks, Doris

dyang · ‎01-23-2014

Mapping from BrightCloud to PAN-DB is pretty straightforward, unless Panorama is involved, as there are some things to look out for in regards to how you may have things setup.

dyang · ‎01-23-2014

Hi pieters, If you're experiencing the same thing with a different URL, please open a ticket with our support team so we can have BrightCloud check to see if the entry is present in the downloadable database, or if there is something else at play. --Doris

dyang · ‎01-23-2014

Sure - are you evaluating this on a production device, or do you have a device in TAP mode?

dyang · ‎01-23-2014

When you click "activate", there are a number of things that happen in the background, mainly depending on whether or not you previously were using BrightCloud. Generally speaking, though, the "activate" button initializes the PAN-DB cache on your device. If you previously used BrightCloud, that means removing BrightCloud components and converting your URL filtering policies from BrightCloud to PAN-DB. All of this happens in the background, followed by an auto-commit. You can read more details about the activation process here: PAN-DB Activation/Installation If you are in a managed environment, more details can be found here: BrightCloud to PAN-DB Migration Process with Panorama

dyang · ‎01-23-2014

Hi cheon, Generally speaking, the BrightCloud database is published once a day, but can be updated more often in the event of an emergency (e.g. gross miscategorization). As a best practice, it is recommended that you set your download interval for BrightCloud to once a day to get the latest updates. Hope this helps, Doris

dyang · ‎01-09-2014

Hi Technical1, Clearing the cache should usually do the trick, as that results in a cache miss, and forces a lookup. However, there is the possibility that this URL is in the downloaded database on-disk. Can you confirm that youv'e updated BrightCloud to the latest version? Thanks, Doris

dyang · ‎12-24-2013

Happy holidays, egearhart

dyang · ‎12-24-2013

VinceM, In the future, when inquiring about future capabilities, please contact your SE for further information and details. Assuming there is an NDA in place, we can have more detailed conversations about your needs. Generally speaking, we cannot discuss roadmap items here on this forum. Additionally, by speaking with your SE, you can be assured that you have the most up-to-date information. Happy Holidays, Doris

dyang · ‎12-11-2013

Great news, Eugene! For what it's worth, may I ask what file type you're trying to detect? Aside from requesting the ability to create a custom file type signature, you may also want to request for us to add an additional file type to our built-in signatures. The appropriate team will evaluate your request, and if they decide to add it, a new signature could be delivered via content, which is a lot faster than waiting for a PAN-OS software release. Either way, please bring this up with your SE. --Doris

Member Since	‎01-03-2011 02:54 PM
Date Last Visited	‎08-18-2015 09:06 AM
Posts	233
Total Likes Received	56

Online Status	Offline
Date Last Visited	‎08-18-2015 09:06 AM

About dyang

Re: Safe Search Enforcement

Re: PA URL FILTERING UPDATES force to update the HA peer

Re: Newly registered domains - how does PANDB classify them?

Re: Browse Time in custom reports

Re: Newly registered domains - how does PANDB classify them?

Re: URL Filtering Log shows FORWARD

Re: URL Filtering Log shows FORWARD

Re: URL Filtering Log shows FORWARD

Re: wildfire findings into the pan-db

Re: Safe Search Enforcement blocking all Google / Bing / YouTube searches

Re: Block traffic to ip addresses

Re: All sites registering as "unknown"

Re: All sites registering as "unknown"

Re: commented file type list available?

Re: URL Category Any

Re: URL Filtering - PANDB vs. Brightcloud

Re: How to enable safe search in youtube?

Re: Brightcloud connection error

Re: Portal Page for web based email?

Re: Which are the PAN-DB URL categorization rules?

Re: Which are the PAN-DB URL categorization rules?

Re: Youtube Edu

Re: PAN-DB Evaluation - How to switch over with minimal impact?

Re: Bright cloud DB classifications on url

Re: PAN-DB Evaluation - How to switch over with minimal impact?

Re: PAN-DB Evaluation - How to switch over with minimal impact?

Re: How many are brightcloud's updating interval?

Re: Bright cloud DB classifications on url

Re: Panorama - Pan-DB and BrightCloud

Re: Panorama - Pan-DB and BrightCloud

Re: Can I create a custom file type?

Unlock your full community experience!

About dyang