This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About datuttle
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About datuttle
02-17-2021
4Posts
0Likes
0Solutions
Feb 17, 2021Last Visited
User
Activity
User
Profile
Latest posts by datuttle
| Subject | Views | Posted |
|---|---|---|
| 2416 | 02-01-2021 11:38 AM | |
| 1567 | 08-18-2020 12:38 PM | |
| 1948 | 06-19-2020 05:51 AM | |
| 16189 | 05-27-2020 08:49 AM |
User Badges
Community Statistics
| Member Since | 01-24-2020 11:57 AM |
| Date Last Visited | 02-17-2021 10:00 AM |
| Posts | 4 |
02-01-2021
11:38 AM
I had a similar experience where implementing the ?v=panosurl caused a huge spike in CPU on our PA5220s we couldn't commit configuration changes. I was kind of shocked that making what was recommended as a change would have such dire effects on our envorironment. Has anyone used it successfully? If not, do you have a work around to make edl ses feeds from minemeld usable for URL filetering?
... View more
08-18-2020
12:38 PM
I am having difficulty getting an output feed setup for URL block list processing. I have an input feed that is set up as a CIFv3 miner and it's showing over 49,997 indicators that are processed and it appears to be working fine. I have a process url aggregator that uses the input miner node and a white-list node and it also shows 49,997 indicators. When I create the output node, the log shows the feed from the aggregator processing but each indicator looks to be dropped as it's presented to the Output feed. The indicator count stays at zero. I have looked over several documents and it looks like everything is configured correctly. Note, I have an IPV4 feed on the same minemeld instance that is processing IOCs with no issues. I am feeding that feed into an EDL on the Palo Alto and it works fine. Any ideas or solutions you've found in your own experiences would be greatly appreciated.
... View more
06-19-2020
05:51 AM
Hello PA/MM Community
I am struggling with configuring URL feeds with Minemeld, I have the inbound feeds communicating and generating about 30,000 IOCs. When I create the output node, which points to an aggregator process, it show RX counters for the processing of the IOCs however they are not available available for integration to our Palo Alto firewall. The IOC counter for the output node is zero while the number of processed records is 33k+. My IPv4 feed is. configured and passing IOCs with no issue. I'm curious about what's missing on the URL configuration? Any thoughts or suggestions would be greatly appreciated.
... View more
05-27-2020
08:49 AM
I have several miner nodes reporting into 5 processors (FQDN,URL,IPV4,etc.). When I create the output node I'm limited to chose a single processor. Is there a way to configure MM to use multiple processor nodes. I found the configuration on a higher ed article on the REN-ISAC site and it directed to create the separate nodes.
As far as the URL and FQDNs feeds do they have to have dedicated output node? I'm getting 153k IOCs and can only transfer 32,000 to my Palo Alto. Any info on what I need to do would be appreciated.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-17-2021
10:00 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks