About bdeschut

I have created an external block list like this: If you follow the URL http://ipecho.net/plain, it will (only) show you your public IP address. I use this object to allow incoming connections to my dynamic (DHCP) external IP. However, I have noticed that sometimes this connections fails. When I wget the URL from an internal system I get something like this: 84.x.y.27 But on my Palo Alto: admin@pa-vm> request system external-list show name dyn_ext_ip vsys1/dyn_ext_ip:         Next update at: Thu Apr 24 13:00:11 2014         IPs:                 84.x.y.2 Notice the last octet is NOT complete? Anyone else seeing similar behavior? Thanks! ... View more

Is it possible to view the countries that are included in the "EU" object? When new countries are added to the EU, will this object be updated via dynamic updates or by upgrading? Does anyone have experience with the accuracy of geo ip on palo alto? Kind regards ... View more

Palo Alto released multiple vulnerabilities for the Heartbleed bug. New Vulnerability Signatures (3) Severity ID Attack Name CVE ID Vendor ID Default Action Minimum PAN-OS Version medium 40039 OpenSSL TLS Heartbeat Brute Force - Heartbleed CVE-2014-0160 alert 3.1.0 informational 36417 OpenSSL TLS Heartbeat Found alert 3.1.0 medium 36418 OpenSSL TLS Malformed Heartbeat Response Found - Heartbleed alert 3.1.0 Modified Vulnerability Signatures (1) Severity ID Attack Name CVE ID Vendor ID Default Action Minimum PAN-OS Version critical 36416 OpenSSL TLS Heartbeat Information Disclosure Vulnerability - Heartbleed CVE-2014-0160 reset-server 3.1.0 Are we fully protected when using the default settings? Could there be any negative impact when setting " OpenSSL TLS Malformed Heartbeat Response Found - Heartbleed" also to drop? Or any of the other? Kind regards ... View more