About jochristian

jochristian · ‎02-26-2016

Nice! 🙂 BTW, I found openphish, and a few other feeds that I am testing on this webpage: https://zeltser.com/malicious-ip-blocklists/ A few of them could be quite interesting to add to Minemeld. /Jo Christian

jochristian · ‎02-25-2016

Perfect! Regarding url/domain lists I have used this one in 7.1 beta. Looks good. https://openphish.com/feed.txt <-- URL feed Maybe something to add to Minemeld? /Jo Christian

jochristian · ‎02-25-2016

Hi, Thanks for your update. I downloaded the ova file, and I noticed now that there are many updates for this Ubuntu image. Could I get any problems updating the packages in Ubuntu outdated, with Minemeld? /Jo Christian

jochristian · ‎02-25-2016

Hi, This is an really good tool for managing dynamic lists. So far I have tested a basic setup and I have a few comments/suggestions. * How do I change the ssl certificate for MineMeld. * Will you also implement domain blocklists soons (currently running 7.1 beta). * How about making our own miner. Information about this. * Will you also support ipv6? Just a few things that I thought of. Thanks for this great tool. Looking forward to the development! /Jo Christian

jochristian · ‎10-30-2015

Hi, Do you have the case number for this problem and the bug id? /Jo Christian

jochristian · ‎09-06-2015

Hi, Seems like TAC is struggling to find the problem here and also reproduce it. Can those of you that have opened up cases on this share the case numbers? That way we can make sure that supports know that this problem is common for many users. My casenumber is 00371068 /Jo Christian

jochristian · ‎08-31-2015

Hmm, no.. I managed to reproduce this issue on my PA-200 running 7.0.2 as well. But I do not have ipv6 at home. So this issue is NOT related to ipv6 it seems. But I do get an certificate error on "fbcdn-profile-a.akamaihd.net". /Jo Christian

jochristian · ‎08-31-2015

Yes, that is what the guy at support told me as well.. He could not reproduce it. Could it be related to which cdn server that you connect to? I'm in Europe. As far as I know FB have servers all over the world. Also we use IPv6 in our office. Since Facebook supports IPv6 that is what we use when we go that webpage. /Jo Christian

jochristian · ‎08-31-2015

Hi, So far we have only seen this on Facebook. But we did not test many other webpages before we downgraded to 7.0.1 (that works fine). If you open an support case on this please refer to casenumber: 00371068 /Jo Christian

jochristian · ‎08-30-2015

Hi, I'm seeing the same problem. I have already opened an case with TAC on this. /Jo Christian

jochristian · ‎11-25-2014

Hello, This bug has been fixed in 6.0.6-h2. It related to userid and hip according to support. Ask your local ASC/support to activate 6.0.6-h2 for your devices, or wait for 6.0.7 that also have the fix. /Jo Christian

jochristian · ‎10-07-2014

Hello Tom, I'm looking at this today. Should I open up a case for this, and let you have a look at it? As Tor described, the two Panoramas can't connect to the other Panoramas log-collector and vice versa. Not sure what we are doing wrong, since a setup like lacks some documentation in my opinion. /Jo Christian

jochristian · ‎04-03-2014

Hello MCmgt, I configured our PA-3050 with this dynamic block list now. And it works perfectly 🙂 Didn't know about this blocklist so thanks for your find. We also use malwaredomainlist in our company (http://www.malwaredomainlist.com/hostslist/ip.txt). /Jo Christian

jochristian · ‎01-30-2014

WOW! I haven't seen that one before. Thanks for the link!

jochristian · ‎01-30-2014

Thanks.. Where did you find this information? And do you know the max for the other devices as well? BTW, what did you mean by App-id signature max is 6,000 for 5060 ? When you also say that the max custom app-id number is 6416?

jochristian · ‎01-30-2014

Hello, Does anyone know what the maximum number of different custom app-id's, that is supported on the different devices? Especially interested in the maximum on the PA-5060 Jo Christian

jochristian · ‎01-27-2014

Hello as-mg.. Do you have the bug number for this issue?

jochristian · ‎10-15-2013

Hello, Not completely sure what you mean here. But you can turn all logging on a rule off if you go into the rule and "action". Remove the "Log at Session End" option. Log at Session Start Log at Session End Jo Christian

jochristian · ‎10-15-2013

To answer my own question.. Seems like it's called: Trojan-Ransom/Win32.blocker.shk Jo Christian

jochristian · ‎10-15-2013

Is this virus detected now? What is the name of the signature? Jo Christian

jochristian · ‎04-16-2013

Looking for this myself. Can't find it in Google Play store.. Jo Christian

jochristian · ‎04-10-2013

Hello, You will find it in this thread: https://live.paloaltonetworks.com/docs/DOC-1910 Or on my dropbox: https://dl.dropbox.com/u/1027606/PaloAlto/PAN-perl-20121110.tar.gz Jo Christian

jochristian · ‎04-09-2013

Hello, If you install panxapi (part of the PAN-perl package, PAN-perl-20121110.tar.gz) you can do a backup of the configuration this way: (From 'man panxapi') Generate an API key. $ panxapi -l admin:admin -h 172.29.9.122 -k keygen: success API key: "0RgWc42Oi0vDx2WRUIUM6A==" Create a .panrc file with the API key. $ echo 'hostname=172.29.9.122' >.panrc $ echo 'api_key=0RgWc42Oi0vDx2WRUIUM6A==' >>.panrc Retrieve the active configuration and write it to a file. $ panxapi -srx >fw-backup.xml show: success Of course this can then be put into a crontab job which automatically does a backup every day. If you put it into a script you can also script it to put timestamps on the backup files. This should also work (if you don't want to use .panrc): panxapi -l admin:password -h 172.29.9.122 -srx > fw-backup.xml Jo Christian

jochristian · ‎03-13-2013

Hello, So have any of you found any cool uses of the USB port on the PA-200? I myself have connected my Raspberry Pi to it. The PA-200 gives more than enough power and I have also connected a wireless usb adapter to the raspberry. The raspberry serves as my internal dns and dhcp server at home. I could also use the wireless usb adapter for setting up an AP or using it as an wireless sniffer. I was a bit surprised yesterday when upgrading the PA-200 to 5.0.3. I did think that the raspberry would loose the power from the USB port when the PA was rebooted. But it did not 🙂 For those of you that don't know what a raspberry pi is look at this link. Raspberry Pi | An ARM GNU/Linux box for $25. Jo Christian

jochristian · ‎03-08-2013

Telnet won't come back again according to my SE :smileyangry: But still not a official answer on this... Jo Christian

jochristian · ‎03-04-2013

PA500 support only v9 as all the other devices (except 4000 that does not support netflow at all). Maybe you can ask your SE if v5 will supported in later versions? I have not heard about any plans for this. Jo Christian

jochristian · ‎03-01-2013

Hello, Did you find a way to do this? Or is it not possible? Jo Christian

jochristian · ‎02-28-2013

You can also take a look at this document describing how you can control Skype

jochristian · ‎02-28-2013

Not sure what you want to know here. Skype is already known traffic in the PA. It's identified as skype and skype-probe. It should be enough to allow these two to allow skype. Jo Christian

jochristian · ‎02-25-2013

Hello again, Seems like an hotfix is out for 4.1.11 to fix this problem. You need to contact support to get it. Jo Christian

Date Registered	‎03-02-2010 12:04 AM
Date Last Visited	2 weeks ago
Total Messages Posted	299
Total Likes Received	15

Online Status	Offline
Date Last Visited	2 weeks ago

Strata

Prisma

Cortex

About jochristian