Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About lmori
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About lmori
09-14-2020
108Posts
216Likes
132Solutions
Sep 14, 2020Last Visited
User
Activity
User
Profile
Latest posts by lmori
| Subject | Views | Posted |
|---|---|---|
| 12465 | 09-14-2020 12:20 AM | |
| 702 | 09-09-2020 12:12 AM | |
| 1060 | 07-27-2020 06:24 AM | |
| 1104 | 07-27-2020 01:09 AM | |
| 45555 | 07-27-2020 01:07 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 Likes | 02-09-2017 02:51 AM | |
| 6 Likes | 02-03-2016 02:26 AM | |
| 4 Likes | 09-19-2019 01:45 AM | |
| 7 Likes | 03-12-2019 06:45 AM | |
| 4 Likes | 02-03-2016 01:58 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like |
My Knowledge Base Contributions
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 6 Likes | |||
| 1 Like | |||
| 4 Likes | |||
| 7 Likes |
User Badges
Community Statistics
| Member Since | 03-03-2011 01:59 AM |
| Date Last Visited | 09-14-2020 10:40 AM |
| Posts | 1,102 |
| Total Likes Received | 214 |
09-14-2020
12:20 AM
Hi @Paul_Stinson,
we are working on the Python3 release. In the meantime you can download the latest docker image with all the Ubuntu security updates applied (we just pushed it). You can also build the image directly from the Dockerfile (https://github.com/PaloAltoNetworks/minemeld-docker), the script will automatically apply all the security updates.
... View more
09-09-2020
12:12 AM
Hi @martinsarrionandia,
thanks for your message. We are aware of those vulnerabilities in the libraries used by MineMeld, but MineMeld code does not make use of the vulnerable features in the affected libraries. We are currently working on:
- a new release based on Python 2.7.18 to get rid of the old versions
- a new release based on Python 3
Happy to discuss all the details.
Please note that Palo Alto Networks has an official process for reporting reporting potential security vulnerabilities in our products, based on the responsible disclosure model. The process is documented here: https://www.paloaltonetworks.com/security-disclosure.
Thanks again.
... View more
07-27-2020
06:24 AM
Could you check for stack traces in minemeld-engine.log file? You can send the log file to me at lmori@paloaltonetworks.com if you prefer
Luigi
... View more
07-27-2020
01:09 AM
@NRB_Herstal those errors are "normal", there should be other errors in the log. Could you explain what you mean by "looping"? is the minemeld service restarting continuosly?
Thanks
... View more
07-27-2020
01:07 AM
@daniel.sneto MineMeld is already exposing the parameters for each Endpoint and those can be used to create split tunnelling configs.
... View more
07-01-2020
09:19 AM
I think the problem is that you are running a pretty old version of MineMeld (0.9.52.post1) and I didn't set the right constraint in the extension.
I would go ahead and uninstall minemeld-taxii-ng using my instructions above.
After upgrading your MineMeld version to a recent one, you will be able to use the extension.
... View more
07-01-2020
08:39 AM
Could you check /opt/minemeld/log/minemeld-web.log for errors?
If you don't see anything and you want to quickly restore try this:
/opt/minemeld/engine/current/bin/pip uninstall minemeld_taxii_ng
and then restart the instance
... View more
06-24-2020
05:59 AM
I have improved the minemeld-taxii-ng extension to improve compatibility with FS-ISAC feeds. You can do this to configure your MineMeld for FS-ISAC:
In System, click on Extensions tab and click on "git"
Use https://github.com/PaloAltoNetworks/minemeld-taxii-ng.git as Repository URL and click Retrieve. Select 0.2a4 as version (or greater). Click Install
Activate the extension
in System, Dashboard restart the API
Now we need to create a prototype, click on Config and then the hamburger icon at the bottom right
Search for the taxiing.phishtank prototype
Click on NEW
Change the configuration removine username and password, and inserting the STIXv1 collection name and TAXII discovery service URL. Click OK when done.
Create a new node from the new prototype by clicking on CLONE. And Commit the config.
Once the engine has restart, click on Nodes and the new Miner. Configure Username and Password for the feed and then click the poll icon
... View more
- Tags:
- elease
04-21-2020
03:41 AM
Hi @Stuart_Walton ,
all the TLS settings are defined in the nginx config. You can safely change the nginx config to apply your TLS best practices.
Luigi
... View more
03-06-2020
02:43 AM
Something is wrong in the MineMeld installation: redis can't load the config. Is this a pristine installation? How did you install it?
... View more
03-06-2020
02:42 AM
Hi @Farouk.Kahoul,
which MineMeld version are you using? the most recent version (0.9.68) has several improvements in how the Azure feeds are handled and you can adopt a solution similar to the one used for regions also for services.
Luigi
... View more
03-06-2020
02:39 AM
@Sreevidhya.R the cause is that some of your feeds has provided indicators that were false positives. Do you have a list of IPs and URLs blocked by the firewall based on the MineMeld EDL? You can use them in the MineMeld logs to check what feed generated them and what attributes were provided.
... View more
03-06-2020
02:38 AM
Hi @BillC,
this is weird and I guess it could have been generated by an old Miner as bl-1. Could you share more about the config? what type of Miners are you using for bl-1, bl-2 and bl-3? How do you feed bl-1?
Could you also search the logs for the string " 200.194" ?
Thanks,
Luigi
... View more
01-28-2020
01:15 PM
@drewdown which config are you referring to? which o364 Miner are you using?
If you could share your config I could give you some guidance.
... View more
01-28-2020
12:02 PM
Just checked and I see that range (40.92.0.0-40.93.255.255) in my MM instance running 0.9.52.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-14-2020
10:40 AM
|
Likes Given To
Likes From
| User | Likes Count |
|---|---|
| 1 | |
| 2 | |
Retired Member
| 1 |
| 1 | |
| 1 |
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
