This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies. For details on cookie usage on our site, read our Privacy Policy
Curiously our 3020 running 7.1.7 has absolutel crapped itself today. It could be coincidence but it's been fine for the past six months. We're on 708-4066 as of now.
... View more
I meant to post this link https://live.paloaltonetworks.com/t5/Featured-Articles/Tips-amp-Tricks-Cipher-suite-enforcement-in-decryption-rules/ta-p/74291 I guess I'm not sure how a decryption profile interacts to force the traffic to something that can be decrypted.
... View more
We're on 7.1.x and use SSL decryption on traffic coming in to sites we host. Is there a way to force the SSL traffic to a (strong) cipher suite(s) that the PAN can decrypt please? I found this KB but I'm not entirely clear if this lets you mandate only cipher suites that can be decrypted? https://live.paloaltonetworks.com/t5/Configuration-Articles/PAN-OS-Supported-ciphers/ta-p/71969 Thank you 🙂
... View more
So far I'm using MineMeld to pull Dshield and Spamhaus feeds to use to block inbound connections to our internet facing servers.
Whilst there are loads of miners I'd love to know which ones people have found "safe" enough to use on production inbound and outbound traffic/rules and how much of an impact it's had - with 70 or so miners to choose from I simply can't test them all 🙂
... View more
