This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About benparker
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About benparker
10-22-2020
18Posts
14Likes
0Solutions
Oct 22, 2020Last Visited
User
Activity
User
Profile
Latest posts by benparker
| Subject | Views | Posted |
|---|---|---|
| 11162 | 06-15-2018 08:34 AM | |
| 1626 | 02-09-2018 09:57 PM | |
| 23328 | 01-09-2018 07:23 AM | |
| 23780 | 12-22-2017 08:04 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 3 Likes | 12-22-2017 08:04 AM | |
| 9 Likes | 01-09-2018 07:23 AM | |
| 2 Likes | 02-09-2018 09:57 PM |
User Badges
Community Statistics
| Member Since | 08-19-2015 06:41 AM |
| Date Last Visited | 10-22-2020 09:12 PM |
| Posts | 18 |
| Total Likes Received | 14 |
06-15-2018
08:34 AM
Would this solve the use case of an application generating a custom URL that goes into a link in email. This link then needs to be clicked on and accessed through a VPN to get to the backend system, such as Epic or SAP from a personal device?
... View more
02-09-2018
09:57 PM
2 Kudos
When setting up logging service, if you receive the following error Failed to verify account. Generic communication error occured. Please enable debugging for detailed info [get-panorama-cert.py:183 (2, 'No such file or directory') when trying to verify the account when following https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Activate-and-Install-Logging-Service-and-GlobalProtect/ta-p/179402. You have most likely not upgraded your Panorama instance to 8.0.5 or above. Currently the base image of the OVA is 8.0.2 and this must be upgraded. Thank you,
... View more
01-09-2018
07:23 AM
9 Kudos
As an update to this, it can be accomplished using a custom Threat and the equal to operate to match against the Context of SSL-RSP-version. The values that are needed to match against TLS 1.0 is decimal 769 (0x030 TLS 1.1 is decimal 770 TLS 1.2 is decimal 771 Example TLS 1.0 I do not recommend leaving the TLS 1.2 threat in an alert mode if you create it but instead change it to allow as it will be extremely noisy. It is however useful if you need to verify the functionality These 3 custom vulnerabilities will allow you the capability of alerting or blocking lower level TLS encryption if areas that might require it for complaince such as PCI zones. Alternatively you can also use decryption profiles to force the traffic to the high level, but it does not produce the same logs for visibility. The attatched XML is the example threat signature to look for TLS1.0 responses.
... View more
12-22-2017
08:04 AM
3 Kudos
Hi, I working with a customer that needs to detect the usage of SSLv3(already done with ID 36815), TLS 1.0 and TLS 1.1, at some point they may move to blocking this on certain traffic. They don't particularly want decrypt the traffic for this due to complaince and organizational policies, and they want to be able to run reports so doing a No decrypt with a profile isn't exactly helpful either. It seems like the best way to accomplish this is through a threat signature that would have either the SSL Client or the Server Hello context which contains the protocal version is 0x030#. This is only 2 of the 7 required bytes so I am not positive what else to match on. Alternatively, with TLS can you still do an equal to match on SSL-rsp-version and if so what values to the TLS versions much against? Would it be 4,5,6? Thank you,
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-22-2020
09:12 PM
|
Likes From
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks