About jdub_cloud

Right on! Thanks so much @Adrian_Jensen   I feel like this should be the responsibility of TAC engineering to identify / test their patterns, but if it can help others, I'll give it a go. 🙂 ... View more

Just like you, I'm receiving these alerts on traffic NOT going to Atlassian instances.    Looking at the PCAP, I see:   GET /max_groupm_vimp/cqBEM_QBMxlLhguztF9yWmT6DTPGVEEVnYEQlMjfCLPdRn-yMBZug.... ... Host: pdc.bidswitch.net ... Referer: https://www.usatoday.com/ ... View more

We are seeing the same false positive.    I opened a ticket the TAC and they are requesting a full packet capture. I'm hesitant to do this on prisma gateways because it's unclear how to reproduce the traffic AND the destination IP changes so the packet capture could be running and running.   We are using the SaaS version of Atlassian, and according to the Security Advisory (https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html) :   Atlassian Cloud sites are protected If your Confluence site is accessed via an  atlassian.net  domain, it  is hosted by Atlassian and is not vulnerable. Our investigations have not found any evidence of exploitation of Atlassian Cloud.     So I'm tempted to make a signature exception in the Antivirus Profile.  Other ideas? ... View more

Reviving this post.    We are also looking for ways to improve our change management procedures to satisfy compliance requirements.    Currently, we are using Panorama to manage our firewalls and use the "Commit Comment" section to include Jira ticket numbers where we can reference the config changes and approvers. We also use the "Audit Commit" but that only applies to policy changes. Unfortunately, this has many limitations: 1. It's easy to forget to add the ticket number 2. There is no explicit way for another team member to approve the change in Panorama/FW. 3. There are times when commits are generated without the comment addition (i.e. upgrades)   Are there any ideas to overcome these challenges?  We'd love to use git, but that would require a heavy lift to create a CI/CD pipeline, and potentially change how we use Panorama. We are happy with Panorama, but just wish there were better features to incorporate change management.   Other ideas?   Thanks!!   ... View more