About gchandrasekaran

Hi Jahnavi, On my device, I generate my certificate with Extenal Authority CSR, after 3 parthy issue the certificate. I edit an CRT file: -----BEGIN CERTIFICATE----- Root CA -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- Intermediate -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- issued certificate -----END CERTIFICATE----- I import in to PAN successfully, I can check "Forward Trust Certificate", when I run "commit", the PAN inform "Unmatch certificate and key". Have you experience for this problem, please share for me. Thanks in advance, ... View more

Thank you very much everyone! ... View more

Please note our new Threat DB just released. Version 458. Notes: Release notes for emergency content release for CVE-2014-6271 update and CVE-2014-7169 Thursday, September 25th, Palo Alto Networks became aware of additional vulnerabilities with the Bash shell utility. The fixes for CVE-2014-6271 were incomplete from Operating System vendors and there is a new vulnerability, CVE-2014-7169, that describes this issue. To address this new vulnerability, Palo Alto Networks is releasing an emergency content update that provides updated detection of both CVE-2014-7169 and the previous CVE-2014-6271 vulnerability with an update to the IPS vulnerability Signature ID: 36729 "Bash Remote Code Execution Vulnerability" with "Critical" severity and default action of "Alert". Please don't forget to mark this discussion as answered if your concerns have been addressed. ... View more

Please note our new release. Version 458 Notes: Release notes for emergency content release for CVE-2014-6271 update and CVE-2014-7169 Thursday, September 25th, Palo Alto Networks became aware of additional vulnerabilities with the Bash shell utility. The fixes for CVE-2014-6271 were incomplete from Operating System vendors and there is a new vulnerability, CVE-2014-7169, that describes this issue. To address this new vulnerability, Palo Alto Networks is releasing an emergency content update that provides updated detection of both CVE-2014-7169 and the previous CVE-2014-6271 vulnerability with an update to the IPS vulnerability Signature ID: 36729 "Bash Remote Code Execution Vulnerability" with "Critical" severity and default action of "Alert". Please don't forget to mark this discussion as answered if we have addressed your concerns. ... View more

Hi Clintl, You can also opt for F5, its one of the best load balancer in industry. A10 load balancere is cheaper one. Regards, Hardik Shah ... View more

After installing content 394-1961, it took sometime (around 7-10 mins) for me to see the TID 36128 and CVE-2013-3893. I request you to wait for sometime and then check whether your able to see the TID in the vulnerability protection profile. Also, run the CLI command "> show system info" to ensure that the threat-version 394-1961 is installed. ... View more

PAN-OS 6.0.x has a feature to disable SIP-ALG. Please refer How to Disable SIP ALG. For prior PAN-OS versions, SIP-ALG can be disabled by configuring an application override policy which will prevent the PA firewall from doing any Layer 7 inspection. So, PA firewall would not open any pinholes. For App override setup, refer How to Create an Application Override Policy ... View more