This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About murphyj
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About murphyj
04-17-2022
35Posts
2Likes
0Solutions
Apr 17, 2022Last Visited
User
Activity
User
Profile
Latest posts by murphyj
| Subject | Views | Posted |
|---|---|---|
| 1500 | 05-08-2021 02:49 AM | |
| 1677 | 06-13-2019 12:52 PM | |
| 2242 | 08-01-2018 11:26 AM | |
| 2251 | 08-01-2018 06:54 AM | |
| 4746 | 06-08-2017 12:07 PM | |
| 7316 | 06-08-2017 11:45 AM | |
| 6777 | 06-08-2017 11:37 AM | |
| 3240 | 02-22-2017 08:34 AM | |
| 1886 | 09-29-2016 05:13 AM | |
| 2372 | 08-23-2016 04:29 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 11-18-2015 07:31 AM | |
| 1 Like | 11-17-2015 07:59 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes | |||
| 1 Like | |||
| 2 Likes |
User Badges
Community Statistics
| Member Since | 12-01-2012 08:18 PM |
| Date Last Visited | 04-17-2022 08:56 AM |
| Posts | 35 |
| Total Likes Received | 2 |
05-08-2021
02:49 AM
From my understanding minemeld is more of an aggregator of data from 3rd party sources. You would probably be better off just hosting you custom EDL on a internal server.
... View more
06-13-2019
12:52 PM
I'm just wondering if there is a way for panorama to talk to vmware to pull in the virtual systems and tags for quicker deployments much like it can do with AWS. I have been looking around but I haven't seen anything specific and help would be great.
... View more
08-01-2018
11:26 AM
7.1.11 is the version Yes the list is showing up under Dynamic URL List, the list has been added to 3 of the URL Filtering profiles so it should apply to 90% of the users. Thank you for your time.
... View more
08-01-2018
06:54 AM
I have just created a new/first External Dynamic List on my firewall with a type of URL. I have applied an action under a number of URL filtering Profiles, but I see the following messages: request system external-list show type url name edl-url1 Server error : external dynamic list global/edl-url1 not used in rule after a while the message will change to: global/edl-url1 external list is not refreshed yet I have just one website one the list for testing and even if I tell it to refresh I get the same message. Has anyone else seen this?
... View more
- Tags:
- EDL
06-08-2017
12:07 PM
If you look at the threat windows under monitor you can you can filter for ( subtype eq vulnerability ) once you have that filtered if you know what rule(s) the vulnerability profile is set to you can then click on the magnifier on the left and look at the details to get more information about the Threat Name that was blocked and the severity. Or depending on the version you are on you could look under the ACC Tab and check the Threat activity and filter by the critical severity and see the rule/count there. I hope that helps if not let me know.
... View more
06-08-2017
11:45 AM
You could always make a clone your existing Vulnerability Profile and then under Exceptions, enable and exception on the ID 40031 and change the Action to allow so that it wont log and you still get all the other vulnerability protection.
... View more
06-08-2017
11:37 AM
FYI, You should be able to create your own External Dynamic block list and add it to your DNS Sinkhole policy and wildcard the sub-domains if you want.
... View more
02-22-2017
08:34 AM
Can you put in a screen shot of the packet capture you want to make it based off of?
... View more
09-29-2016
05:13 AM
I don't believe you can see the details of the default signatures. A read only account should already be able to see the custom threats that you or someone else has created.
... View more
08-22-2016
06:33 AM
I have recently setup/enabled some zone protection on one of my interfaces. I have set the values high since I have no way of knowing how much data is actually passing the interface and what threshold would trigger the dropping. Now that its running I know I can run the following command "show zone-protection zone untrust" to see the current count of packets passing and or dropped. What I'm wondering is if anyone has a good way of pulling all that data in over a course of a week or month, so that I can see the trending numbers to adjust my zone protection. I'm currently running splunk on our network for logging. Any help would be appreciated. Thank you
... View more
11-26-2015
05:53 AM
I just did a quick look and it looks like H323 also seems to use UDP so you might want to and the same pattern but the a udp context. I could be completely wrong though.
... View more
11-18-2015
09:19 AM
Thank you. Before I got to try that someone I work with recommended 111\.2\.3\.[0-9]+ and that got it all in one statement. I does seem to cover everything, So I will be rolling with that for a bit but if I get false positives I will be using what you recommended.
... View more
11-18-2015
09:09 AM
On top of that there is issues with the decryption profile if you check the Block Sessions with untrusted issuers, the website might not send the full cert chain so the PA will set the site as untrusted instead of doing a quick call and you will have to add the certificate into the PA to not get the Certificate error.
... View more
11-18-2015
07:31 AM
1 Kudo
That did work for me. Thank you.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
04-17-2022
08:56 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks