Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About ZEBIT
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About ZEBIT
4 weeks ago
72Posts
7Likes
6Solutions
May 21, 2021Last Visited
User
Activity
User
Profile
Latest posts by ZEBIT
| Subject | Views | Posted |
|---|---|---|
| 144 | 05-06-2021 04:16 AM | |
| 223 | 05-06-2021 01:38 AM | |
| 195 | 05-05-2021 11:48 PM | |
| 264 | 05-05-2021 11:27 PM | |
| 404 | 04-23-2021 12:11 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 06-08-2020 05:05 AM | |
| 2 Likes | 09-20-2018 11:46 AM | |
| 1 Like | 07-05-2018 01:52 AM | |
| 1 Like | 04-16-2014 11:15 PM | |
| 1 Like | 10-08-2014 11:30 PM |
User Badges
Community Statistics
| Member Since | 04-16-2014 10:54 PM |
| Date Last Visited | 4 weeks ago |
| Posts | 72 |
| Total Likes Received | 7 |
05-06-2021
04:16 AM
@reaper We did this before but the thing is we use this Windows CA to sign lot of internal applications. If the firewall would get breached or hacked, the hacker is able to get the Windows CA certificate. This way we need to re-generate the Windows CA and resign all these applications.
... View more
05-06-2021
01:38 AM
@QuentinH Yeah we found a solution. We created an application group with the file sharing apps we allow. This is wetransfer and google drive. After that I created a policy rule called File sharing app, allowed the users who may use these apps, set the Application to the application group we created and in the URL filtering we allowed the category online storage and backup. We created a seperate URL filtering for this policy rule.
... View more
05-05-2021
11:48 PM
We have created on the firewall a Root CA which also signs the SSL Forward Trust certificate. The firewall Root CA certificate has been deployed with GPO to all our devices there Trusted Root Certificate Authorities. The root ca certificate on the firewall will almost expire and needs to be renewed, but what is the procedure? Select the certificate -> click renew -> commit, export this certificate and redistribute everything through GPO again?
... View more
05-05-2021
11:27 PM
@QuentinH Yeah we found a solution. We created an application group with the file sharing apps we allow. This is wetransfer and google drive. After that I created a policy rule called File sharing app, allowed the users who may use these apps, set the Application to the application group we created and in the URL filtering we allowed the category online storage and backup. We created a seperate URL filtering for this policy rule.
... View more
04-23-2021
12:11 AM
@BPry I have rules which allows app like wetransfer download and no URL filtering. After this rule I have a rule with URL filtering. When we we hit the site download.wetransfer.com the app rule doesn't get hit but the URL filtering rule. After allowing the category online storage and backup the site get recognized as wetransfer-download.
... View more
04-22-2021
02:52 AM
Yeah we are decrypting the traffic. But doesn't get recognized as the correct app-id. The link that get's opened is download.wetransfer.com/ The problem is that the app-id is wetransfer downloading which is allowed, but the url download.wetransfer.com is in the URL categorie online backup and storage and that is a block categorie in our environment. So one rule is over rulling the other one.
... View more
04-21-2021
06:29 AM
I have created a rule which allow the wetransfer (download and upload) application. But when a user receive an email to download a file the url is we.tl/random numbers. When the user clicks it the firewall doesn't see it as the application wetransfer-download but as category online storage and backup. Is this a bug in the Pan-OS and how can we solve this?
... View more
04-12-2021
12:36 AM
I found through internet this explanation and this helped me well.
How to Create a new MineMeld output node based on existing prot... - Knowledge Base - Palo Alto Networks
... View more
04-02-2021
07:01 AM
Hi all,
I'm new to in using MineMeld. I have configured installed and configured it on Ubuntu 16.04. I would like to configure miners but I don't know how to start with it.
Through the internet I have found this page minemeld-node-prototypes/bruteforceblocker.yml at master · PaloAltoNetworks/minemeld-node-prototypes · GitHub and would like to use the bruteforceblocker.yml. But how can I implement it and use it on my firewall?
... View more
06-08-2020
05:05 AM
1 Kudo
Good idea. Forgot to check that. Will do and come back to you.
... View more
06-08-2020
03:11 AM
Hi @kiwi I think I'm quit soft (too soft) in my policy. Here you can see screenshots of the whole policy + certficats like our partner implemented.
... View more
06-07-2020
11:45 PM
Hi, We use a PA3260 with PanOS 9.0.7. Since 2 months our programmers have problems connection to Azure Devops. The always lose the connection several times a day. When they work from home there is no problem, so I think the problem is the firewall. I already searched in the monitoring for deny's or SSL decryption errors but can't find anything. After two three days of searching and programmers that are complaining I don't know what todo. So maybe somebody of you are having the same issues and a solution?
... View more
06-07-2020
11:37 PM
Hi, We are using a PaloAlto 3260 with PanOS 9.0.7. We have configured SSL decryption wich uses a certificate signed by our own Windows CA server. Each client in our environment has the Windows Root CA. In the beginning (2 years ago) everything worked well. We could decrypt everything except everything in the category financial. But now latest months it seems I need to add a lot of websites for no decryption because otherwise the employees can't visit the website. It is getting frustrated and I'm think about disabling SSL decryption, but maybe you guys know an answer or solution. Thanks.
... View more
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
