Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About s_quasar
About s_quasar
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Friday
59Posts
1Like
2Solutions
May 22, 2020Last Visited
User
Activity
User
Profile
Latest posts by s_quasar
| Subject | Views | Posted |
|---|---|---|
| 1528 | 11-14-2019 07:30 AM | |
| 1576 | 11-13-2019 09:00 AM | |
| 1587 | 11-12-2019 02:21 PM | |
| 1622 | 11-12-2019 08:40 AM | |
| 1645 | 11-12-2019 08:35 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 05-30-2017 01:38 AM |
User Badges
Public Statistics
| Date Registered | 11-15-2016 06:31 AM |
| Date Last Visited | Friday |
| Total Messages Posted | 59 |
| Total Likes Received | 1 |
11-14-2019
07:30 AM
I want to consider that if an IP make traceroute, this is the first step to do other bad activities on my infrastructure so I want to block it (and not deny) before it can attempt to infiltrate in my network.
... View more
11-13-2019
09:00 AM
Hi, no, I want to block IP not deny like in reconnaissance in zone protection or in vulnerability protection that you can create a custom rule with 3600 seconds block IP.
... View more
11-12-2019
02:21 PM
I supposed this. Maybe I can see specific IP attacker and victim because before I activeted a classified rule (now is aggregate). See the IPs is very useful because I can check in other websites if it is a bad or good IP. Maybe I can use an aggregate rule as a test and than activete again a classified rule.
... View more
11-12-2019
08:40 AM
Hi all, I have set up a dos rule from outside to my server zone. Why sometimes I can see attacker and victim IP and sometimes not?
... View more
11-12-2019
08:35 AM
Hi all, is there a way to block IP source if I match traceroute App-ID? Maybe with a custom vulnerability?
... View more
11-01-2019
07:29 AM
Hi all, dos protection rule can override zone protection? I have a zone protection activated for OUTSIDE and a policy in dos protection from OUTSIDE to INSIDE. In zone protection there are specific features (like ip spoofed) that are not present in dos protection and I want to apply all my rules.
... View more
10-30-2019
09:46 AM
I've checked now the configuration. Now I can view all the IPs in GUI. Maybe as you say I've checked the list before apply the rule. Thanks.
... View more
10-30-2019
09:06 AM
@michelealbrigo thanks a lot for you help. If you have a little bit of time can you take a look at these my other problems? (especially about log forwading) https://live.paloaltonetworks.com/t5/General-Topics/log-to-Kiwi-Syslog/m-p/293687 https://live.paloaltonetworks.com/t5/General-Topics/Decryption-policy-and-SNI/m-p/293676 You help is very appreciated
... View more
10-29-2019
04:01 AM
Yes that's the problem I meant. Do you know some good lists to use for blocking malicious IPs? I found http://plonkatronix.com/plonkatronixBL.txt and this URL https://panwdbl.appspot.com/ (I'm investiganting about this).
... View more
10-28-2019
07:48 AM
I thought it was enough to insert the EDL instead we also need the security rule. Thaks a lot! Only one last question. Why in the standard Paloalto EDL do you see all the IPs in detail, while in my personalized rules I don't see IPs? In this manner I can't insert any exceptions.
... View more
10-28-2019
07:21 AM
How can I use it in a policy? In which part of configuration have I to enter?
... View more
10-28-2019
06:37 AM
Hi, I have a rule with many denies IPs. Is maybe for this reason? Have I to create a special policy for EDL?
... View more
10-27-2019
03:30 PM
Hi, I find this error: EDL(my list) Entry not referenced by a rule. What does it mean? How can I resolve it?
... View more
10-24-2019
08:52 AM
Solved. You have to use \s for the space instead of %20
... View more
10-22-2019
08:42 AM
Hi, I have configured this signature: Operator: Pattern Match Context: http-req-params Pattern: WAITFOR\%20DELAY When I digit for example http://www.mysite.com/index.php?WAITFOR%20DELAY the signature is not matched. Can someone help me about this?
... View more
10-22-2019
03:55 AM
Hi, about the logs firewall. Is there a feature to activate to view in monitor these specific activities? I see nothing in monitor -> logs -> traffic.
... View more
10-22-2019
03:16 AM
Is there anyone that works decrypt in the presence of SNI? Can I have an example about decryption with SNI?
... View more
10-17-2019
06:59 AM
Hi, my problem is yet here. Thank you for your help but this is not my case. I have problem on decrypt only if I have a website that share the same IP (SNI).
... View more
01-23-2019
01:28 AM
I've made the change but the problem is the same: SSL_ERROR_NO_CYPHER_OVERLAP. The error in chrome is ERR_SSL_VERSION_OR_CIPHER_MISMATCH.
... View more
01-22-2019
03:06 PM
Now I've stopped the rule so I can't do this test but I think this is not a solution because I can't open the firefox configuration of all people to make this change.
... View more
01-22-2019
02:35 PM
Hi, I activated a decyption policy but my site is configured with SNI. If I apply the policy, the other site with the same IP is blocked with error SSL_ERROR_NO_CYPEHR_OVERLAP (this in Firefox). Which is the correct configuration with SNI?
... View more
- Tags:
- decryption policy
- sni
11-19-2018
09:31 AM
Hi, with the command "ping source <mgmt_address> host x.x.x.x" I have the correct response.
... View more
11-19-2018
09:16 AM
Hi, kiwi is listening in UDP port. I have no other log active. I can ping only the managment interface but not other IPs with the command "ping host x.x.x.x"
... View more
11-18-2018
01:05 PM
Hi, I've configured all the necessary in my PA-500 but I can't view logs Kiwi Syslog v8 in my PC. Is there some special configuration I missed? I've configured the firewall for UDP sessions. I've some DMZ configured, maybe I forgot to open some ports?
... View more
10-29-2018
09:41 AM
Hi, now with this problem I have another one: "failed to handle tdb_update_block" when commit. Now also in local firewall I can't commit. This is a great problem!
... View more
10-23-2018
02:47 PM
I have an interface named "management" with IP 10.254.1.1 and this is the IP that I can access in HTTPS (and I can also use SSH for the CLI) to manage the firewall but the active has IP 192.168.1.1 and the passive 192.168.1.2. These 2 IPs are unreachable. The configuration was made by an external company. OT: this is also linked to another problem because I would like to activate the logs to an excternal software but to do the tests I can not understand which IP with MIB Browser I have to connect to.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
Friday
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
