This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
About SvenMik
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About SvenMik
04-17-2018
3Posts
0Likes
1Solution
Apr 17, 2018Last Visited
User
Activity
User
Profile
Latest posts by SvenMik
| Subject | Views | Posted |
|---|---|---|
| 7003 | 03-27-2017 06:48 AM | |
| 2437 | 03-27-2017 06:34 AM | |
| 5681 | 03-27-2017 06:21 AM |
User Badges
Community Statistics
| Member Since | 02-23-2016 05:23 AM |
| Date Last Visited | 04-17-2018 08:28 AM |
| Posts | 3 |
03-27-2017
06:48 AM
Hello gafrol, Mainly custom applications will trigger a false positive with LA - which happens at times. I think the whitelisting we have to do is still in an acceptable range. This module is still far from perfect but fills the gap between allowing all WF Unknown files and blocking everything WF has not seen before. At this point we still have to rely on the WF verdict though. I share your concern for the lack of updates in Content Updates.
... View more
03-27-2017
06:34 AM
Hello Bernhard, At this moment you cannot control Trusted Publishers other than applying Content Updates. You can find the entries in the database tables dbo.Publishers. Maybe you can control it by adding your certificates to the PublisherName field? I know you can use it the other way around by removed entries. Please note that I have not tested this method and probably is not recommended by Palo Alto Networks. So use/test at your own risk 🙂 And also inform me if it works or not!
... View more
03-27-2017
06:21 AM
Hello Jimmy, I don't think you can set a restriction on the forensic folder size. What I would typically do is configure the quaraintine folder to a seperate disk. You can move the quarantine folder in the IIS Manager > Sites > Default Web Site > BitsUploads > Basic Settings > Modify the Physical path, Test the settings and press OK. Please note this might not be the best pratice configuration from Palo Alto Networks. You should also deleted unused preventions from the quarantine folder every 3 days according to Palo Alto Networks.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
04-17-2018
08:28 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks