LIVEcommunity - About scantwell

scantwell · ‎09-06-2019

There are free evaluation licenses that your reseller and/or PANW-SE can provide to you, that allows 30 day testing. But NFR licenses are for 1 year and are not free.

scantwell · ‎09-06-2019

Licenses are purchased from your reseller. Do you have a reseller than can submit a PO on your behalf? Perhaps I misunderstood your question. Did you purchase your NFR VM100 from a reseller?

scantwell · ‎08-31-2017

Hello NO error messags in the file ubuntu@minemeld:/var/log$ more cloud-init-output.log Cloud-init v. 0.7.5 running 'init-local' at Wed, 23 Aug 2017 12:40:50 +0000. Up 7.78 seconds. 2017-08-23 12:40:52,367 - cloud-init[WARNING]: Stdout, stderr changing to (| tee -a /var/log/cloud-config-output.log, | tee -a /var/log/cloud-config-output.log) Generating public/private rsa key pair. Your identification has been saved in /etc/ssh/ssh_host_rsa_key. Your public key has been saved in /etc/ssh/ssh_host_rsa_key.pub. The key fingerprint is: What is below this is my key fingerprints (not displaying these in public community. 😛 Confirmation on the following... please even though I see references for cloud in this image, I am using the correct version for VMWare Player, correct? I would hate to waste time and troubleshooting to find that I am using an incorrect version. ubuntu@minemeld:/var/log$ netstat -na Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN tcp 0 0 192.168.1.4:22 192.168.1.12:32231 ESTABLISHED tcp6 0 0 :::22 :::* LISTEN udp 0 0 0.0.0.0:68 0.0.0.0:* udp 0 0 0.0.0.0:60069 0.0.0.0:* udp6 0 0 :::19782 :::* Next steps please? Steve

scantwell · ‎08-23-2017

I am brand new into Minemeld. I followed the link https://live.paloaltonetworks.com/t5/MineMeld-Articles/Running-MineMeld-on-VMWare-desktop/ta-p/72038 for installation and followed steps. All seemed to work fine. There was a note that to access Minemeld, it would be using 443. Great. I opened my browser up and attempt to reach the DHCP:443 address of Minemeld. Cannot connect. i did a netstat -na on the minemeld via cli and 443 is not opened up? I have attached output. What could I be doing incorrectly?

scantwell · ‎06-22-2015

I have implemented SinkHole and it works awesome. thanks

scantwell · ‎10-06-2014

Tician I would like for you to go back and test the number of users and logins. Your comment about After 15 or 20 log in's and out's, I have faced with automatic log off from web interface after successful login..... I have seen this before (automatic log off when you logged in...) and I see this as a bug in 6.x version of software. I have talked to PAN about this, but I do not think a bug tracker has been identified on this.

scantwell · ‎09-15-2014

I do not see any problems with upgrading a single FW only. It should not break the HA functionality.

scantwell · ‎09-05-2014

I believe he is talking about Trusted CA Trusted Root CA —The certificate is marked as a trusted CA for forward decryption purposes. I think he had this checked off. when he removed it, his GP worked. This would make sense.

scantwell · ‎09-05-2014

I am not aware of any single location that you would /could see all the re-graded items in a single location. I like the idea of what you are doing, however, I think the spirit of the reasoning behind re-grading was for a handful of apps, not all of them. So, I feel you are looking at a feature request to have a single list.. trust me.. that would be very handy and helpful! Thanks SC

scantwell · ‎08-15-2014

I tried to migrate over my Cisco IPS regex to Palo Alto but it failed to load. Below is my Cisco Regex. [Uu][Ss][Ee][Rr][-][Aa][Gg][Ee][Nn][Tt][:][\x20][^\x0d\x0a]*([Ss][Yy][Nn][Aa][Pp][Ss][Ee]) I tried creating a new pattern but it is to specific and not working. I am looking to search the http header for User-Agent and if the value contains the word Synapse then alert. Can someone help me to better understand what I am doing wrong? Can someone educate me AND help generate the RegEx example for me.. (that is my real question) Thanks Steve

scantwell · ‎07-23-2014

Quick question.. What experience does anyone in the forum has with setting up a PA in an E-Commerce site? Is there anything in specifics that we need to do differently than a normal implementation? The basis is that E-Commerce will have servers on the internet, so they are very prone to "nosey" people who are constantly trying to exploit vulnerabilities. I understand that we scan for the known vulnerabilities, but I also need to know if there is anything else that needs to be done on the FW. I am going to recommend that SSL Inbound Decryption be enabled to give the FW the opportunity to scan for the bad traffic. Any other items/best practices, configuration recommendations, etc, would be greatly appreciated. Let me know asap :smileysilly: Steve

scantwell · ‎07-21-2014

Hi Guys I need some help/thoughts on how to do the following: I have 5 Panorama servers that are virtual in Montreal. I need to move them ffrom Montreal to a different VMWare environment in Chicago I need to know if there are any problems with doing such a thing. Is there a document that can be found to do this. I am concerned about a different CPUID/UUID being different from one VMWare server to another. I mean, how else do you prevent someone from buying a single copy of software and deploying it in multiple locations (that do not talk to each other) Help! :smileysilly:

scantwell · ‎10-23-2013

Also, I think it is important to understand what hardware platform you are running, what screens/pages are loading slowly for you. For example. I have a PA-2050 that when I first configured it, all was working fine. As I continue to add more rules the security policy page gets slower as it takes time to read the entire page etc. Unless someone comes back to tell me this is abnormal, I am pretty sure this is working as intended.

scantwell · ‎10-03-2013

More than that... which I agree with Mikand and PanOs.... the IE (or any browser) is a client connecting to a server page. If IE is not displaying correctly, it has gotten the info from the FW, but not showing it correctly. thats a browser issue and nothing that PA can do to fix that... sorry

scantwell · ‎09-05-2013

I always understood the Migration Tool was geared to Partners only, not to the end users. Maybe that is why it has limited access.

Member Since	‎08-01-2012 07:54 AM
Date Last Visited	‎05-28-2020 09:51 AM
Posts	132
Total Likes Received	32

Online Status	Offline
Date Last Visited	‎05-28-2020 09:51 AM

Re: NFR licenses vm-100

Re: NFR licenses vm-100

Re: port 443 for Minemeld not opened. Cannot log into Web Console

port 443 for Minemeld not opened. Cannot log into Web Console

Re: PA blocks spyware - identify compromised computer

Re: PanAgent support

Re: Policy Based Forwarding - Enforce Symmetric Return

Re: Another bug for 5.0.3

Re: Indicated Firewall

Re: Setup SSL Inbound Inspection with 3rd party certs

Re: RegEx looking for a specific UserAgent.

Re: Download GlobalProtect for Testing

Re: Encrypted and Zipped files with virus in it

Re: Indicated Firewall

Re: Any way to disable split tunnelling for my vpn clients ?

Re: NFR licenses vm-100

Re: NFR licenses vm-100

Re: port 443 for Minemeld not opened. Cannot log into Web Console

port 443 for Minemeld not opened. Cannot log into Web Console

Re: PA blocks spyware - identify compromised computer

Re: Maximum number of FW admin sessions

Re: PA-500 and memory upgrade

Re: Global Protect Client, portal error message: Client Certificate Error

Re: List of custom risks

RegEx looking for a specific UserAgent.

Best Practices for E-Commerce customers?

How to move licensing and SN of Panorama from one VMWare environment to another

Re: Palo Alto Slow

Re: PA Web-UI Strange~

Re: Migration from an Cisco ASA 5510 to a PA 3020

Network Security

Cloud Security

Security Operations