Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About sahithyan.subbu
About sahithyan.subbu
Announcements
Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
2 weeks ago
52Posts
4Likes
1Solution
Apr 04, 2021Last Visited
User
Activity
User
Profile
Latest posts by sahithyan.subbu
| Subject | Views | Posted |
|---|---|---|
| 280 | 01-14-2021 09:43 PM | |
| 189 | 12-19-2020 09:16 PM | |
| 255 | 12-18-2020 08:47 AM | |
| 9676 | 10-29-2020 11:20 PM | |
| 9811 | 10-27-2020 02:23 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 10-27-2020 02:23 AM | |
| 1 | 04-02-2020 12:26 AM | |
| 1 | 01-07-2020 03:06 AM | |
| 1 | 11-24-2019 09:25 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 3 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 11-21-2019 03:38 AM |
| Date Last Visited | 2 weeks ago |
| Total Messages Posted | 53 |
| Total Likes Received | 4 |
01-14-2021
09:43 PM
Hash Values cannot be blocked from FW level, you need to upload that file to wildfire in order to get the Antivirus signature (Threat ID). You can check the Threat vault for HASH values, Threat Vault (paloaltonetworks.com) If you cannot find the HASH values, check with VirusTotal or other public sites and find the File Type of the HASH because Antivirus signature will be created only based on Wildfire supported file types. Please contact your local palo alto SE to create a feature request on your behalf for Wildfire support of that particular executable file, feature requests could be implemented in future. Find below the link that has information regarding Wildfire Supported File Types: WildFire File Type Support (paloaltonetworks.com) Regards, Sahithyan
... View more
12-19-2020
09:16 PM
@BPry Customer is 3020 platform with 9.0.10 OS and I have tested in VM platform with 9.1.6 OS. Also yes, I have ECDHE enabled in decryption profile.
... View more
12-18-2020
08:47 AM
Hi team, I have a file blocking profile for upload direction for all type of applications and file types. I am using Decryption as well, Only in Google Drive File blocking is happening in so weird manner. Pdf's and jpegs are getting blocking if only they are in less than 1MB, if they are more than 1MB files are getting uploaded. I see the traffic is http/2 stream also I tested with striping the ALPN, when downgrading to http1.1 , file block happening for all regardless of any file size. But customer not willing to downgrade and wants to know why it is happening for http/2 .! Tested in PAN OS 9.0.10 & 9.1.6 with latest content version and also with an old multiple versions, behavior is same. Any advise .?
... View more
10-29-2020
11:20 PM
@kiwi @BPry Thanks guys .
... View more
10-27-2020
02:23 AM
1 Kudo
Dear Team, Below is the warning message for Mac User after upgrading to Latest Mac OS Big Sur version 11.0 beta . It says it will be incompatible with the future version of MAC OS. Global protect version : 5.1.6
... View more
10-23-2020
07:17 AM
Hi team, What does INNR represents in type when looking at the session ID details. I know that this happens at child session, when parent session ID belongs to the HTTP/2 ID. If you guys have any idea about what INNR represents, let me know.
... View more
09-02-2020
08:33 AM
Hi @reaper Thanks for your reply. Customer runs 9.0.7. I have a query that what if customer restarts the daemon or pid and then generates the TSF and share it to find the RCA. ? becuz there will not be a debugging and we cannot deep dive into logs..! In such cases will it be able to find why daemon or PID stopped working ??
... View more
08-31-2020
10:39 PM
Hi team, I would like to know why Daemons and processes ids are getting suspended or not working. I can see that which daemon stopped working by this cmd, > show system software status and for example: routed is stopped and i have restarted the routed process. But here i want to know what caused that daemon to not work ? Is there a way to check why daemon going suspended ? If it can be found in TSF using Auto assistance or PANTS tool, please do let me know. Note: routed is just an example, i want to know generally for all daemons...!
... View more
07-29-2020
08:37 AM
Hi team, ++ I want to configure HIP- Anti Malware with virus definition version. ++ I see in HIP log for Definition version as 200729-4 but I am not able to configure the same in Virus definition option in HIP anti malware. ++ I am not able to use any kind of characters and not more than 5digits. ++ How do I configure this ?? Attached my HIP log. HIP Virus Definition version
... View more
06-14-2020
06:17 AM
Hi team, I am facing the source IP mismatch region . This is the IP 41.139.156.142 which shows up from Kenya, i have confirmed from https://ping.eu & https://threatvault.paloaltonetworks.com/ but in firewall traffic log it show like this IP belongs to Germany. I have blocked this IP in policy but why it is happening ? Why firewall shows mismatch source region ? Does someone have insight on this issue ?? PAN OS version is 8.1.10.
... View more
06-10-2020
04:37 AM
@reaper I got your ref from GOT. Good one. I already configured as per you said, i have configured authenticatoin rulebase and placed on top and also i have configure agent and captive portal accordingly, but it is not working. Do u have any document to configure this ??
... View more
06-09-2020
11:51 PM
Hi , You have use this pattern in block category to block all the youtube videos *.youtube.com/watch? and add Url which should be allowed in allowed category https://www.youtube.com/watch?v=CG7WDmFpsjU
... View more
06-09-2020
05:17 AM
Hi team, How to make work the Palo Alto Captive portal after users logged in to Global protect. ? Users who got connected to GP should get captive portal auth page while they try to use internet. Is there any way to achieve this ?
... View more
05-27-2020
03:11 AM
Hi team, I need to configure data filtering in firewall which should alert me when an excel sheet traffic which contains 19 gmail address goes through the FW i should get alert and traffic should get block when there are 20 and more gmail addresses. My regex is (g)|(G)mail\.com and this is working for websites like onedrive and wetranfer but for gmail it is not working as excepted. Instead of giving an alert, FW sends the reset flag for excel which contains 19 gmail addresses. Does any body have any idea about this ? I have even enabled strip ALPN in decryption profile for http/2 traffic.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
2 weeks ago
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
