About rsingh

As we continue with our efforts to improve and enhance the public cloud UTDs, a new version of Google Cloud Platform (GCP) UTD focused on how VM-Series firewall enhances GCP native security is now available.  In the latest version, attendees receive temporary access to GCP to run the lab. No setup required and no GCP account required.   What's new in Azure UTD v2.0: - Provide  students temporary access to GCP console  and review how VM-Series is deployed in GCP - Demonstrate how VM-Series enhances GCP native security tools (like GCP firewall rules and Cloud Armor) by providing  protection for advance attacks - Showcases how to  improve security policy  by converting port-based policy to application based-policy  with Policy Optimizer  in VM-Series - Enables VM-Series to  monitor VM Changes in GCP  and apply the metadata in security policy  using Dynamic Address Groups  (DAG) - Runs in Cloudshare, need to schedule class in Cloudshare like other UTD workshops - Upgraded to PanOS-9.0   Lab Topology: Itching to get hands-on. Please register   here   to attend (online or in-person) the upcoming workshop classes.  ... View more

As we continue with our efforts to improve and enhance the public cloud UTDs, a new version of Azure UTD focused on VM-Series firewall in Azure is now available.  In the latest version, attendees receive temporary access to Microsoft Azure to run the lab. No setup required and no Azure account required.   What's new in Azure UTD v2.0: - Runs in Cloudshare, need to schedule class in Cloudshare like other UTD workshops - Provide students temporary access to Azure console and review how VM-Series is deployed in Azure - Demonstrate how to prevent threats while allowing certain applications - Showcases VM-Series integration with Azure Application Insights to publish PanOS metrics - Demonstrate fault tolerance to redirect the traffic to active VM-Series firewall - Showcases how to improve security policy by converting port-based policy to application based-policy with Policy Optimizer in VM-Series - Upgraded to PanOS-9.0   Please register here to attend (online or in-person) the upcoming workshop classes.      ... View more

Hi All, A Social Security number (SSN) CANNOT : * Contain all zeroes in any specific group (ie 000-##-####, ###-00-####, or ###-##-0000) * Begin with ‘666’. * Begin with any value from ‘900-999′ * Be ‘078-05-1120′ (due to the Woolworth’s Wallet Fiasco) * Be ‘219-09-9999′ (appeared in an advertisement for the Social Security Administration) * Contains all matching values (ie 000-00-0000, 111-11-1111, 222-22-2222, etc.) * Contains all incrementing values (ie 123-45-6789) In my LAB, I tried to match few SSN values with pre-defined SSN pattern match. Here are the results, 235-85-7896 - match 111-11-1111 - match 888-88-8888 - match 078-05-1120 - match 219-09-9999 - match 123-45-6789 - match >>> 000-00-0000 - not a match 000-78-8956 - not a match 900-89-8547 - not a match 666-89-5896 - not a match 999-89-8956 - not a match 999-99-9999 - not a match 000-89-5869 - not a match 458-00-5689 - not a match 458-98-0000 - not a match Based on the results, >>> SSN is matching “111-11-111  to 888-88-888” was matching Predefined SSN, which should not be the case. >>> SSN was matching 078-05-1120, 219-09-9999 and 123-45-6789, which it should not. Any thoughts? ... View more

Hi All, In my LAB Test, Here is what I did, ++ Created a data pattern with CC (10) and SSN (10) to match SSN or CC ++ Under Data Filtering Profile, added the pattern with file type as "text/html" with Alert threshold as 1 ++ Sent an email with a file "TESTssn.dll" ++ It is hitting the rule ++ It seems Firewall is detecting the DLL files under file type "text/html" Note: How I created the file, a) Created a text file with some random SSN number in it b) Changed the extension from .txt to .dll Is this expected? or its False positive? Whenever we try to open a .dll file, windows by default select HTML or we can open it as a text file. I am not sure if this information is related. Any thoughts? ... View more