Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About s_quasar
About s_quasar
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
06-04-2020
59Posts
1Like
2Solutions
Jun 04, 2020Last Visited
User
Activity
User
Profile
Latest posts by s_quasar
| Subject | Views | Posted |
|---|---|---|
| 2441 | 11-14-2019 07:30 AM | |
| 2489 | 11-13-2019 09:00 AM | |
| 2531 | 11-12-2019 02:21 PM | |
| 2566 | 11-12-2019 08:40 AM | |
| 2558 | 11-12-2019 08:35 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 05-30-2017 01:38 AM |
User Badges
Public Statistics
| Date Registered | 11-15-2016 06:31 AM |
| Date Last Visited | 06-04-2020 09:42 AM |
| Total Messages Posted | 59 |
| Total Likes Received | 1 |
11-14-2019
07:30 AM
I want to consider that if an IP make traceroute, this is the first step to do other bad activities on my infrastructure so I want to block it (and not deny) before it can attempt to infiltrate in my network.
... View more
11-13-2019
09:00 AM
Hi, no, I want to block IP not deny like in reconnaissance in zone protection or in vulnerability protection that you can create a custom rule with 3600 seconds block IP.
... View more
11-12-2019
02:21 PM
I supposed this. Maybe I can see specific IP attacker and victim because before I activeted a classified rule (now is aggregate). See the IPs is very useful because I can check in other websites if it is a bad or good IP. Maybe I can use an aggregate rule as a test and than activete again a classified rule.
... View more
11-12-2019
08:40 AM
Hi all, I have set up a dos rule from outside to my server zone. Why sometimes I can see attacker and victim IP and sometimes not?
... View more
11-12-2019
08:35 AM
Hi all, is there a way to block IP source if I match traceroute App-ID? Maybe with a custom vulnerability?
... View more
11-01-2019
07:29 AM
Hi all, dos protection rule can override zone protection? I have a zone protection activated for OUTSIDE and a policy in dos protection from OUTSIDE to INSIDE. In zone protection there are specific features (like ip spoofed) that are not present in dos protection and I want to apply all my rules.
... View more
10-30-2019
09:46 AM
I've checked now the configuration. Now I can view all the IPs in GUI. Maybe as you say I've checked the list before apply the rule. Thanks.
... View more
10-30-2019
09:06 AM
@michelealbrigo thanks a lot for you help. If you have a little bit of time can you take a look at these my other problems? (especially about log forwading) https://live.paloaltonetworks.com/t5/General-Topics/log-to-Kiwi-Syslog/m-p/293687 https://live.paloaltonetworks.com/t5/General-Topics/Decryption-policy-and-SNI/m-p/293676 You help is very appreciated
... View more
10-29-2019
04:01 AM
Yes that's the problem I meant. Do you know some good lists to use for blocking malicious IPs? I found http://plonkatronix.com/plonkatronixBL.txt and this URL https://panwdbl.appspot.com/ (I'm investiganting about this).
... View more
10-28-2019
07:48 AM
I thought it was enough to insert the EDL instead we also need the security rule. Thaks a lot! Only one last question. Why in the standard Paloalto EDL do you see all the IPs in detail, while in my personalized rules I don't see IPs? In this manner I can't insert any exceptions.
... View more
10-28-2019
07:21 AM
How can I use it in a policy? In which part of configuration have I to enter?
... View more
10-28-2019
06:37 AM
Hi, I have a rule with many denies IPs. Is maybe for this reason? Have I to create a special policy for EDL?
... View more
10-27-2019
03:30 PM
Hi, I find this error: EDL(my list) Entry not referenced by a rule. What does it mean? How can I resolve it?
... View more
10-24-2019
08:52 AM
Solved. You have to use \s for the space instead of %20
... View more
10-22-2019
08:42 AM
Hi, I have configured this signature: Operator: Pattern Match Context: http-req-params Pattern: WAITFOR\%20DELAY When I digit for example http://www.mysite.com/index.php?WAITFOR%20DELAY the signature is not matched. Can someone help me about this?
... View more
10-22-2019
03:55 AM
Hi, about the logs firewall. Is there a feature to activate to view in monitor these specific activities? I see nothing in monitor -> logs -> traffic.
... View more
10-22-2019
03:16 AM
Is there anyone that works decrypt in the presence of SNI? Can I have an example about decryption with SNI?
... View more
10-17-2019
06:59 AM
Hi, my problem is yet here. Thank you for your help but this is not my case. I have problem on decrypt only if I have a website that share the same IP (SNI).
... View more
01-23-2019
01:28 AM
I've made the change but the problem is the same: SSL_ERROR_NO_CYPHER_OVERLAP. The error in chrome is ERR_SSL_VERSION_OR_CIPHER_MISMATCH.
... View more
01-22-2019
03:06 PM
Now I've stopped the rule so I can't do this test but I think this is not a solution because I can't open the firefox configuration of all people to make this change.
... View more
01-22-2019
02:35 PM
Hi, I activated a decyption policy but my site is configured with SNI. If I apply the policy, the other site with the same IP is blocked with error SSL_ERROR_NO_CYPEHR_OVERLAP (this in Firefox). Which is the correct configuration with SNI?
... View more
- Tags:
- decryption policy
- sni
11-19-2018
09:31 AM
Hi, with the command "ping source <mgmt_address> host x.x.x.x" I have the correct response.
... View more
11-19-2018
09:16 AM
Hi, kiwi is listening in UDP port. I have no other log active. I can ping only the managment interface but not other IPs with the command "ping host x.x.x.x"
... View more
11-18-2018
01:05 PM
Hi, I've configured all the necessary in my PA-500 but I can't view logs Kiwi Syslog v8 in my PC. Is there some special configuration I missed? I've configured the firewall for UDP sessions. I've some DMZ configured, maybe I forgot to open some ports?
... View more
10-29-2018
09:41 AM
Hi, now with this problem I have another one: "failed to handle tdb_update_block" when commit. Now also in local firewall I can't commit. This is a great problem!
... View more
10-23-2018
02:47 PM
I have an interface named "management" with IP 10.254.1.1 and this is the IP that I can access in HTTPS (and I can also use SSH for the CLI) to manage the firewall but the active has IP 192.168.1.1 and the passive 192.168.1.2. These 2 IPs are unreachable. The configuration was made by an external company. OT: this is also linked to another problem because I would like to activate the logs to an excternal software but to do the tests I can not understand which IP with MIB Browser I have to connect to.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-04-2020
09:42 AM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
