This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About blebail
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About blebail
05-19-2020
56Posts
3Likes
3Solutions
May 19, 2020Last Visited
User
Activity
User
Profile
Latest posts by blebail
| Subject | Views | Posted |
|---|---|---|
| 8616 | 03-09-2018 08:57 AM | |
| 4342 | 10-03-2017 03:49 PM | |
| 4261 | 02-29-2016 02:34 AM | |
| 11189 | 02-29-2016 02:31 AM | |
| 4266 | 02-26-2016 05:54 AM | |
| 11194 | 02-26-2016 05:48 AM | |
| 3429 | 02-26-2016 03:18 AM | |
| 12735 | 02-25-2016 02:11 PM | |
| 12898 | 02-25-2016 09:29 AM | |
| 12902 | 02-25-2016 08:19 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 Likes | 03-09-2018 08:57 AM | |
| 1 Like | 10-03-2017 03:49 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 09-05-2013 03:39 PM |
| Date Last Visited | 05-19-2020 02:38 PM |
| Posts | 56 |
| Total Likes Received | 3 |
03-09-2018
08:57 AM
2 Kudos
Hi,
Cortex XDR is a security application cloud based solution relying on Palo Alto Application Frameworks which leverages Palo Alto Networks Logging Service.
Logging Service receives data from Palo Alto Networks devices whether they are on premise or in the cloud as well as from Global Protect Cloud Service.
To get the best out of it, Cortex XDR must see traffic between users and servers and traffic going from internal networks to Internet. Other traffic logs are a nice to have to collect as well but not mandatory.
To answer your question, traffic generated at internet edge, which logs are sent to Logging Service, is one of the must-have traffic we recommend but not the only one as described above.
I hope this answers your question.
Regards,
Bertrand
... View more
10-03-2017
03:49 PM
1 Kudo
Hi,
For Splunk, you might be looking for this http://docs.splunk.com/Documentation/ES/4.7.2/Admin/Downloadthreatfeed
The output node has the definition of the Taxii feed which in this case is a discovery service.
Regards,
Bertrand
... View more
02-29-2016
02:31 AM
Luigi,
After booting my minemeld instance this morning, the device list showed up. So I think you can mark the bug as fixed.
Don't know, however, why it didn't show up after my post update reboot...
Thanks
Bertrand
... View more
02-26-2016
05:54 AM
Hi Luigi,
Is there any plans to customize the tag criteria sent through DaGPusher? If you have two DagPusher from two different miners, it is complex to figure out which one is coming from one DaGPusher and which one is coming from another.
Thanks
Regards,
... View more
02-26-2016
05:48 AM
Hi Luigi,
tested(Safari & Chrome) with 0.9.4, bug is still present.
Regards,
Bertrand
... View more
02-26-2016
03:18 AM
Hi Luigi,
.yml file for DagPush node in /opt/minemeld/local/config shows password of the device in clear text. It should be at least hashed.
Thanks
Regards,
Bertrand
... View more
02-25-2016
02:11 PM
Thanks Luigi,
Understood and it works much better. Very good job by the way.
Cheers,
B.
... View more
02-25-2016
09:29 AM
Luigi,
I tried with the following (as Office365 is still experimental):
Miner: malwaredomainlist.ip
Aggregator: stdlib.aggregatorIPv4Generic
And dagPusher as the Output.
I didn't get any result in viewing objects on PA devices and got the attached screenshots which makes me feel the dagPusher is not processing, while receiving, indicators.
There is no error in the minemeld-engine.log
Regards,
Bertrand
... View more
02-25-2016
08:19 AM
Luigi,
I got no output from the command. I suspect a problem in the DagPusher connection to the firewall. What is the best course to troubleshoot that the handled device is correctly connected from Minemeld?
Thanks
Bertrand
... View more
02-25-2016
07:03 AM
Luigi,
Can you confirm DAGPusher name should match tag for DAG in PAN-OS? I can't have the DAG updated with Minemeld indicators
Thanks
Bertrand
... View more
02-25-2016
07:00 AM
Hi Luigi,
With MineMeld 0.9.3 running on VMware Fusion, DAGPusher Output Node Handled devices list does not appear (see attached screenshots).
Tested with Safari 9.0.3 (11601.4.4) and 48.0.2564.116
Thanks
Bertrand
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks