This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About tcervellione
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About tcervellione
03-28-2023
5Posts
2Likes
0Solutions
Mar 28, 2023Last Visited
User
Activity
User
Profile
Latest posts by tcervellione
| Subject | Views | Posted |
|---|---|---|
| 468 | 12-28-2022 10:35 AM | |
| 1989 | 10-19-2022 12:34 PM | |
| 19397 | 09-07-2022 07:34 AM | |
| 885 | 05-17-2022 11:16 AM | |
| 954 | 03-24-2022 04:28 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 12-28-2022 10:35 AM | |
| 1 Like | 03-24-2022 04:28 AM |
User Badges
Community Statistics
| Member Since | 05-24-2021 11:37 AM |
| Date Last Visited | 03-28-2023 07:35 PM |
| Posts | 5 |
| Total Likes Received | 2 |
12-28-2022
10:35 AM
1 Kudo
Hi, great article. One question - what are the differences between the Panorama databases and the Remote Device databases? Have an issue where a simple query isn't running in Panorama Threat databases (just returns 'No Matching Records'), but does run in Remote Device databases (returns results): ((action eq alert) or (action eq allow)) and not (subtype eq vulnerability) and (severity eq critical) Seems to be because of the alert/allow parameter. Runs ok in Panorama databases when I remove that.
... View more
10-19-2022
12:34 PM
It's still the same with factory resets to this day. They really need to add some verbiage in the factory reset documentation about having to wait so long for the PA-HDF situation and the initial log in to work right. I was certain there was something corrupted on the firewall.
My Status LED was also amber for a long time as well. Maybe it was coincidence, but it changed to green after I changed the admin password (which you get forced to do now in CLI, before you can log on).
... View more
09-07-2022
07:34 AM
I was curious on opinions about how to test this new category for false positives. Is everyone just setting it to block in their labs and then running it against critical domains? Also, is this category going to be mostly populated with URLs that are shifted over from existing categories - like malware? Thanks.
... View more
05-17-2022
11:16 AM
Hello. I have a customer asking whether API connectivity for automated URL category queries from a different vendor appliance is possible (specifically Swimlane). I haven't been able to find much in general on API URL queries, let alone from different vendors. I found a Live Community thread from a couple years ago: https://live.paloaltonetworks.com/t5/general-topics/pan-db-api-for-url-re-categorization/td-p/292976 And also an old Wiki how to article, which suggests it's possible with bash scripts: https://networkwiki.blogspot.com/2018/03/palo-alto-networks-querying-multiple.html?m=1 But that's about it. Hoping someone can either point me in the right direction or give me a definitive 'No, this is not possible'. Thanks!
... View more
03-24-2022
04:28 AM
1 Kudo
The Wildfire engine obviously has a large impact on AV signatures, URL-Filtering categorization, and DNS Security, but I was curious if it plays any part at all in creating new vulnerability protection threat IDs? If not, then are new IDs created solely on new public CVEs, PoCs, and Unit 42 threat research investigations?
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks