Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About CyberEye
About CyberEye
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
9 hours ago
13Posts
0Likes
2Solutions
Sep 24, 2020Last Visited
User
Activity
User
Profile
Latest posts by CyberEye
| Subject | Views | Posted |
|---|---|---|
| 1503 | 07-14-2020 12:56 PM | |
| 299 | 07-14-2020 02:27 AM | |
| 1552 | 07-13-2020 11:14 AM | |
| 1583 | 07-13-2020 09:42 AM | |
| 1618 | 07-13-2020 05:52 AM |
User Badges
Public Statistics
| Date Registered | 11-12-2017 11:23 AM |
| Date Last Visited | 9 hours ago |
| Total Messages Posted | 19 |
07-14-2020
12:56 PM
Hi Nijith, Thanks for your commments. Now its working after changing the DNS to public.
... View more
07-14-2020
02:27 AM
Dear, IF the agent is not communicated with traps server within the revocation period, default value(90 Days) ,the ESM released the license from the particular endpoint and that will showed as unlicensed.You can change the license revocation period from} Setting}Agent Setting}license revocation period
... View more
07-13-2020
11:14 AM
Hi @hisingh , Thanks for your reply.Please find the detailed threat log for ID 68360795 as mentioned before most 68360795 is unknow in my firewall also most of the signatures are unknown. I checked in another firewall which is having same content version and i can see the 68360795 is visible.But same in my firewall showing as unknown.If you can check the previous screenshots related to exception you can see the ID eg: 327772845 which is also showing as unknown.For confirming please check this ID in your FW
... View more
- Tags:
- DNS Signature
- iman
07-13-2020
09:42 AM
Hi @hisingh Yes the signature due to DNS security.The firewall which am using all the signatures are currently showing as unknown signature and Unknown fqdn. Attached screenshot below Same i checked another firewall which is having same AV nd APT versions. Am also trying to give an exception for 68360795 but which also showing as unknown in my FW.
... View more
07-13-2020
05:52 AM
The firewall which am using shows an the signature's name as unknown signature and FQDN as showing as unknown-fqdn
... View more
07-12-2020
08:18 AM
Getting false positive for the Link tivoli.com.qa as threat name(68360795).Its getting DNS sinkholing.Can anyone help to know how we give the exception only for the threat ID 68360795 and the Fqdn is tivoli.com.qa. Attached screenshots below
... View more
04-15-2020
08:33 AM
Dear Friends, The issue has been resolved after upgrading 9.0.6 from 9.05. Thanks for all the inputs
... View more
- Tags:
- Pan-OS 9.0.5
04-11-2020
10:37 PM
@kiwi Thanks for your reply. As I mentioned am using local DB profile for the VPN users authentication.I Hope the document which you shared is not applicable in this scenario. Thanks, RBK
... View more
04-08-2020
01:42 AM
Dear Fox, After 2 minutes not able to access the internal resource through Global protect VPN. While investigation I found the user is showing unknown (>show user ip-user-mapping ip x.x.x.x) Attached screenshots name"User-id-01". using the local authentication method for global protect VPN and configured connection timed out greater than 30 minutes(attached screenshots named "User-id Connection setting"). As a workaround removed the usernames from the policy. Did anyone face this similar issue? Appreciated if anyone gives the solution User-id Connection setting User-id-01 Thankx, Robin
... View more
03-14-2020
11:16 PM
We have received a Critical Security Advisory related to Buffer Overflow Vulnerability in Point-to-Point Protocol Daemon (pppd). is applicable to our PaloAlto and Panorama Firewall devices.? Risk Advisory No CVE-2020-8597 Advisory Name Buffer Overflow Vulnerability in Point-to-Point Protocol Daemon (pppd) Severity Critical Action Required Immediate Summary CVE-2020-8597 CVE A new buffer overflow vulnerability has been discovered in pppd (Point to Point Protocol Daemon) versions 2.4.2 through 2.4.8. An unauthenticated remote attacker could cause memory corruption in the pppd process, which may allow for arbitrary code execution. System administrators are encouraged to update pppd software with the latest available patches in order to prevent vulnerability exploitation. Affected Products Buffer Overflow Vulnerability in Point-to-Point Protocol Daemon (pppd) versions 2.4.2 through 2.4.8 are vulnerable to CVE-2020-8597. This package is included in software products from different vendors. Please find below the list of confirmed affected vendors: • Cisco • Debian GNU/Linux • Fedora Project • NetBSD • OpenWRT • Red Hat • Sierra Wireless • SUSE Linux • Synology • TP-LINK • Ubuntu Recommendations It is recommended to update the pppd package with the latest available patches provided by each vendor. An authenticated attacker may still be able to exploit the vulnerability even if EAP is not enabled by sending unsolicited EAP packets to trigger the buffer overflow. If the package has been compiled from source, the latest software can be obtained from the pppd repository in Github: • https://github.com/paulusmack/ppp • https://github.com/paulusmack/ppp/commit/8d7970b8f3db727fe798b65f33 77fe6787575426 For those using the lwIP (lightweight IP) package compiled from source with EAP enabled at compile time, the latest version is also available on Github: • http://git.savannah.nongnu.org/cgit/lwip.git • http://git.savannah.nongnu.org/cgit/lwip.git/commit/? id=2ee3cbe69c6d2805e64e7cac2a1c1706e49ffd86 Regards,
... View more
01-27-2020
08:26 AM
Dear @MickBall @MichaelBall , Thanks a lot for the correct information. Thanking you
... View more
01-27-2020
06:17 AM
Dear @MichaelBall , Thanks for the reply, Can we use certificate or LDAP on the same portal. some clients are iPad's (should be authenticated through certificate)and others are laptops that need to authenticate via LDAP username and password. I try one by one and it's working fine in a single portal. I need to know whether this can be achieved in a single portal with two authentication profiles? Thanks in advance, Robin
... View more
01-22-2020
01:04 AM
Planning to implement a certificate-based authentication method in Global protect VPN in some of the iPad. All other clients should be able to log in just using with LDAP(username/password). The customer doesn’t have GP Portal license. Can we achieve this on 8.1.x PAN-OS with two client authentication profile? Anyone did this one 8.1.X OS?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
9 hours ago
|
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
