Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About fredallee
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About fredallee
Thursday
89Posts
19Likes
23Solutions
Jun 10, 2021Last Visited
User
Activity
User
Profile
Latest posts by fredallee
| Subject | Views | Posted |
|---|---|---|
| 2774 | 08-18-2014 03:04 PM | |
| 482 | 05-16-2014 07:56 AM | |
| 825 | 05-27-2013 05:41 PM | |
| 799 | 03-20-2013 03:01 PM | |
| 797 | 03-19-2013 07:13 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 08-22-2011 09:43 PM | |
| 1 Like | 02-01-2011 09:31 PM | |
| 1 Like | 03-18-2011 09:23 AM | |
| 2 Likes | 03-10-2010 09:17 AM | |
| 1 Like | 08-26-2010 09:18 AM |
User Badges
Community Statistics
| Member Since | 03-27-2009 09:15 AM |
| Date Last Visited | Thursday |
| Posts | 89 |
| Total Likes Received | 19 |
08-18-2014
03:04 PM
1 Kudo
Amber, You can create a threat exception by clicking on the name of the threat in the threat log. The pop-up window will allow you to select which security profile to add the exemption and also add an IP address if you only want to turn the signature off for a specific IP address as opposed to turning the signature off for the entire security profile. Alfred
... View more
05-16-2014
07:56 AM
2 Kudos
There are 2 settings. There is a file blocking profile which can be setup to alert, continue, block, or forward to WildFire for sandboxing based on file type. There is another setting for WildFire signatures under the AV profile. This setting is used to decide what you would like to do with WildFire malware signatures. If you set WildFire signatures to block, it will block on malicious files based on the WildFire signatures. WildFire signatures are updated every 30 minutes based on malware detected from all devices sending files to WildFire.
... View more
05-27-2013
05:41 PM
1 Kudo
The current version of the WildFire appliance does not support the API.
... View more
03-20-2013
03:01 PM
1 Kudo
We have released an article on DevCenter with 3 signatures to identify and control March Madness Live traffic. Here's the link:
... View more
03-19-2013
07:13 PM
We're checking it out tonight. Thankfully there are 2 play-in games tonight which gives us a view into what the NCAA March Madness Live traffic looks like. Look out for Dev Center and KnowledgePoint articles about this tomorrow.
... View more
02-06-2013
11:04 AM
Puffin is a cloud browser meaning that they proxy all traffic for the client to the Puffin servers via SSL. You should be able to create a custom App-ID using the hostname of the server cert cloudmosa.com.
... View more
12-06-2012
07:23 AM
Hi Sebastian, We will take a look at this sample and get back to you. Stay tuned... Alfred
... View more
09-05-2012
02:58 PM
We normally don't write signatures for specific URLs that end up getting inserted via SQL injection attacks, unless they are exceptionally pervasive. These are everywhere and it is impossible to cover them all. Instead we have generic SQL injection signatures that can detect many common SQL injection attempts, and customers can also write custom vulnerability signatures for specific SQL injection attacks that you may be concerned about.
... View more
07-20-2012
05:59 AM
Yes, WildFire works the same in L3 and tap mode. I'm not sure why your setup isn't working only in tap mode.
... View more
07-17-2012
08:22 AM
Not right now. However, we are looking at potentially adding this feature to the portal. A workaround would be to add an alias email address to your support account, and that alias would represent multiple email addresses.
... View more
07-05-2012
12:05 PM
What is the actual signature that is being enabled behind that exception rule? Is it a custom sig or the Palo Alto Networks ftp brute force sig?
... View more
06-26-2012
08:23 AM
1 Kudo
You can indeed do this. In PAN-OS 4.0, a new action called block-ip was introduced. You can block based on source IP or source and destination IP pair. You can use this action in the vulnerability protection profile > Exceptions, find the signature and change the action to block-ip. Set the time from 1-3600 seconds. On the zone protection profile, you can also use the block-ip action associated with the reconnaissance protection for port scans and host sweeps.
... View more
04-24-2012
08:44 PM
1 Kudo
There is no secret. The default actions for vulnerability protection and anti-spyware signatures have been available on the profile either under the custom signatures or under the exceptions area (depending on your PAN-OS version). For antivirus, the default action is always set to block. We are also working on an easier and automated method to make this and other threat meta data available in an upcoming PAN-OS release. Alfred
... View more
04-08-2012
11:54 AM
Thanks Manfred. We have also written an AV signature for it and are planning to release it tomorrow. Alfred
... View more
03-28-2012
04:49 PM
No, the user would not see a block page for a vulnerability exploit that was detected. If a specially crafted web page contained an exploit, we would take the action associated with that signature on the profile, i.e. drop all packets and send a tcp reset to the client, server, or both, alert, etc. We don't have a block page for vulnerability protection.
... View more
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
