About hisingh

Hello    In 8.1, 9.x series; the Pattern will not be accepted if it is less than 7. We need some more data like any other common characters in the string to match.  Here is the document that explained how the customer signatures are created: https://knowledgebase.paloaltonetworks.com/servlet/fileField?entityId=ka10g000000U0ruAAC&field=Attachment_1__Body__s Best Himani ... View more

Hello @bit_byte    Please see above in this thread for the detailed answer. You will see FW management port sending such query because one of the following reason: 1.  FQDN Address Objects:  When  IoC domains are configured to use in the Destination Address in Security Policies. 2. IP addresses in pre-defined threat report where reporting engine picking up blocked websites or blocked domains to populate IP addresses. In the above two cases firewall to attempt DNS resolution on the FQDN Address Object, and populate an IP Address for Security Policy match.  If you want to make a black-list, please use spyware profile or EDLs. The custom Domain EDLs can have a list of your custom domains. 3. DNS security is enabled.  4. DNS proxy is enabled   Best Himani     ... View more

Hello @Claudio    This file is submitted for review   Best   ... View more

Hello @poloso    I have submitted the hash for re-analysis   Best Himani ... View more

Any time, it is my pleasure   Himani ... View more