Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About nextgenhappiness
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About nextgenhappiness
404Posts
63Likes
15Solutions
Last Visited
User
Activity
User
Profile
Latest posts by nextgenhappiness
| Subject | Views | Posted |
|---|---|---|
| 1518 | 11-12-2020 10:50 AM | |
| 834 | 06-14-2020 06:30 AM | |
| 899 | 06-12-2020 03:45 PM | |
| 1814 | 05-14-2020 06:21 AM | |
| 559 | 05-10-2020 04:13 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 05-10-2020 04:13 AM | |
| 1 Like | 05-14-2020 06:21 AM | |
| 1 Like | 05-02-2020 05:00 AM | |
| 1 Like | 05-01-2020 08:07 PM | |
| 2 Likes | 05-01-2020 03:14 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 2 Likes | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 01-20-2012 10:53 AM |
| Date Last Visited | |
| Posts | 404 |
| Total Likes Received | 55 |
11-12-2020
10:50 AM
Thanks, E
... View more
06-12-2020
03:45 PM
PA220, running 8281-6129 If I go to https://www.eicar.org/?page_id=3950 and try download test files using http, the firewall is not blocking of the download. If I go to the old site, http://2016.eicar.org/85-0-Download.html , the firewall will block it.
... View more
05-14-2020
06:21 AM
1 Kudo
try min-age and min-kb options in show session + min-age minimum age in seconds + min-kb minimum KB of byte count > show session all filter min-age <value> <1-4194304> minimum age in seconds for example show session all filter min-age 86400 to find all sessions that has not aged out for over 86400 seconds (1 day) when you run the command. That should provide the list of session which has not aged out for over X seconds, or use min-kb to look for large transfer. you can also use the API to get all the session detail out as well, /api/?type=op&cmd=<show><session><all><filter><min-age></min-age></filter></all></session></show>
... View more
05-10-2020
04:13 AM
1 Kudo
@Pradeepkumar064 I don't believe the core files are included as part of the tech support file. Please see this link for how to download the core files, https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfUCAS E
... View more
05-02-2020
05:00 AM
1 Kudo
@simsim The pro is easy to setup to allow remote access to your network using RDP.. The con is without sufficient protection and monitoring in place (ie MFA, patch system, log monitoring), once the hacker gains access via RDP. The damage that can cause is unlimited. E
... View more
05-01-2020
08:07 PM
1 Kudo
Let's see, once I am able to RDP login to a host which is part of the AD. The opportunity is endless. I can start by following these steps which I just finish #2, Reconnaissance Initial intrusion into the network Establish a backdoor into the network Obtain user credentials Install various utilities Privilege escalation/ lateral movement/ data exfiltration Maintain persistence Google "pass the hash" , "windows privilege escalation" or I just drop a ransomware on the file servers to lock all the user data , etc. etc...
... View more
05-01-2020
03:14 PM
2 Kudos
Let me understand your question, Allow anyone from Internet able to connect to a system listen on Remote Desktop protocol on your network? Is that what you are asking? 1. How update is the system patch level? 2. There could be a chance of non-publicly disclosure bugs on RDP can use a backdoor (also known as 0 days attack, which I disagree with that term). 3. How is the password complexity and length? Does it require multi factor authentication? Is it a client cert based login authentication? 4. If I am able to login to that host, is that system part of Corp Active Directory? How secured is the AD admin accounts? and more and more...
... View more
04-23-2020
05:24 AM
What is the mgmt interface IP address on both units. The HA1 backup IP address should be the other HA member mgmt interface address. (Not as what you shown as 192.168.1.2)
... View more
04-22-2020
06:30 AM
How is the inter-vsys connection currently setup? and the proposal fix look like?
... View more
04-22-2020
05:06 AM
Hello @MarcelBolleboom , If your environment only have 2 vsys and it won't get any bigger. That is one way to resolve the inter-vsys performance issue. Do you have a diagram that can help us understand the problem? Have you able to identify the traffic pattern? Is there a specific zone/subnet in one vsys that all the systems from the other vsys need to access?
... View more
04-18-2020
09:10 AM
1 Kudo
just my 2 cents, 9.0.8 just got released on April.16. Also, Palo Alto Networks Security Advisories listed number of security related issues are addressed 9.0.7 and later. There is a known bug PAN-131792 when I tested in 9.0.6, target fix is 9.0.9. webUI cannot build monitor traffic log filter via policies -> security -> rule -> right click -> Log Viewer.
... View more
04-15-2020
11:44 AM
try change security policy rule 1 from untrust to trust TO from trust to untrust
... View more
Contact Me
Likes From
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
