About smalayappan

Hi Team,   One of the customer is looking to block files based on data filtering and he wanted to block any text that contains C programs, he wants to block based on the keywords used in the program.   Sample Regex used by customer.   .*(.*(\#include).*((cout)|(cin)|(return)|(main)|(iostream)))   Can anyone be of some assistance to us on this query. ... View more

Hi Team,   I would like to know is there a command from the API where we can export all the Allowed Categories or List of All Categories in URL categories.   The issue is when trying /config/predefined/url-categories it only gives partial data which looks like only for alert and block category while the remaining categories are not listed. As the command says it is only for pre-define, anything for custom category is not shown.   Any thoughts on this will be of much appreciated.   Thanks, Sriram M ... View more

I have a Splunk server that logs all Acitve Directory authentication events on my network. I have set up a syslog feed from the Splunk server to the Palo Alto. On the Palo Alto, I have created a syslog filter and added the Splunk as a User-ID syslog server. The problem I have is that Splunk sends each logon event as a single syslog entry which contains carriage returns and new lines (\r and \n). From what I can tell, the Palo Alto to expects to receive each user/IP pair in a single line. This means that I cannot parse the syslog to extract the info as user ID and IP are on different lines within a single syslog entry. Any thoughts on this will be of much assistance to me Thank you. Ram. ... View more