This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About wrainwater
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About wrainwater
06-27-2018
15Posts
5Likes
0Solutions
Jun 27, 2018Last Visited
User
Activity
User
Profile
Latest posts by wrainwater
| Subject | Views | Posted |
|---|---|---|
| 1493 | 01-05-2018 06:22 AM | |
| 405 | 11-21-2017 08:00 AM | |
| 2640 | 11-21-2017 05:58 AM | |
| 2645 | 11-21-2017 05:53 AM | |
| 2650 | 11-21-2017 05:46 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 11-17-2017 09:50 PM | |
| 1 Like | 11-01-2017 08:21 PM | |
| 3 Likes | 10-30-2017 09:03 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 4 Likes | |||
| 3 Likes | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 10-30-2017 01:24 PM |
| Date Last Visited | 06-27-2018 09:46 AM |
| Posts | 15 |
| Total Likes Received | 5 |
01-05-2018
06:22 AM
The way my firewall is configured, the wireless traffic gets routed to the internal traffic through it. After connecting my laptop to the wireless on our network, I am unable to reach a software that was recently implemented for some reason. I was tracing down what could've been the issue for hours. I logged into the firewall and went straight to the traffic log to see if I saw the firewall dropping the packets only to see nothing. I then ran a packet capture (from in the firewall) and finally saw the dropped packets. This is not the first time this has happened as I had a similar experience while troubleshooting AP's one time. Does anyone know why this happens?
... View more
11-21-2017
08:00 AM
thanks to all of you. Im actually in the process of setting up SSL decryption right now. I have a rule set up on my computer to decrypt all the outbound traffic. Once that is set up, it'll give me better info on what the SSL traffic really is.
... View more
11-21-2017
05:53 AM
Im assuming you are referring to monitor - logs - threat and use the servers ip address to see what it is telling me right?
... View more
11-21-2017
05:46 AM
they are internal servers. a few domain controllers, one front end exchange server, and a few others.
... View more
11-20-2017
05:45 AM
I just got a spyware infected host report that says something like Destination address | Destination Host Name | Count X.X.X.X hostname.domain.com 2.94k X.X.X.X hostname2.domain.com 1.44k X.X.X.X hostname3.domain.com 681 Some of the hostnames are pretty important servers, so this has me worried about. Can anyone tell me what the report is telling me? Are these servers infect with spyware and the spyware is sending that much data out?
... View more
11-17-2017
09:50 PM
1 Kudo
I configured the firewall to decrypt outbound SSL traffic and installed a local cert I created onto my broswer. When I monitor my port 443 traffic I see some of it is decrypted and some of it isnt. Is this normal behavior? I thought it was suppose to decrypt all SSL traffic? Also, I was trying to create a policy that would send an alert any time malicious activity is found inside the traffic. the decryption profile only allows you to block everything. How would this alert be possible? Im new at making these rules.
... View more
11-05-2017
10:20 AM
Reading your experiences is teaching me something about the SSL decryption in the firewall. Diverge from the original as much as you want.
... View more
11-04-2017
12:59 PM
Thanks. That was very easy to follow. I'll give it a try. I'll repost here if I'm unsuccessful.
... View more
11-03-2017
06:35 PM
I'm currently reading articles on this site on how to set this up. I was hoping someone could point me to a guide or tell me a very basic test set up for this feature on the P.A. Thanks in advanced.
... View more
11-01-2017
08:21 PM
1 Kudo
I like the URL filtering category even though it has caused me some issues every now and then. The threat and wildfire submissions helped us track down some problematic packets a few times as well. I'd really live to dive more into the decryption and QoS features but haven't had time to learn how to properly implement them yet.
... View more
10-31-2017
05:49 AM
Looks like your question was answered but i'll post what I was sent anyway. To clear space please enter the below commands: (active)> delete debug-log mp-log file *.old (active)> delete debug-log mp-log file *.log.4 (active)> delete debug-log mp-log file *.log.3 (active)> delete debug-log mp-log file *.log.2 (active)> delete debug-log mp-log file *.log.1 (active)> delete debug-log dp0-log file *.old (active)> delete debug-log dp0-log file *.log.4 (active)> delete debug-log dp0-log file *.log.3 (active)> delete debug-log dp0-log file *.log.2 (active)> delete debug-log dp0-log file *.log.1 (active)> delete debug-log dp1-log file *.old (active)> delete debug-log dp1-log file *.log.4 (active)> delete debug-log dp1-log file *.log.3 (active)> delete debug-log dp1-log file *.log.2 (active)> delete debug-log dp1-log file *.log.1 (active)> delete debug-log dp2-log file *.old (active)> delete debug-log dp2-log file *.log.4 (active)> delete debug-log dp2-log file *.log.3 (active)> delete debug-log dp2-log file *.log.2 (active)> delete debug-log dp2-log file *.log.1 After running these commands it chopped my main partition down from 96% to 89%.
... View more
10-30-2017
09:14 PM
I'd like to know the answer to this as well. just dealt with a similar issue not too long ago. Although my problem was with the main partition md2. We were sitting between 96-98%. With the help of support I was given commands that help brought it down to around 89%. As far as answering what those partitions are this article may answer your question (depending on the PA model you are using.) Go straight to page 8 and read on down. Mine is in the 5000 series so thats the only documentation I have. 5060 Architecture
... View more
10-30-2017
09:03 PM
3 Kudos
I think this is a great idea. Keep up with the challenges to get users interacting with one another!
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-27-2018
09:46 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks