About ethiSEC

Depending on what you need the EDL hosting service may be a better option:   https://docs.paloaltonetworks.com/resources/edl-hosting-service ... View more

Sorry for updating this. Please be aware that pan-configurator was stopped, but continued under a new name and repository: https://github.com/PaloAltoNetworks/pan-os-php it has the same features set from pan-configurator, but already improved and extended. ... View more

As @vsys_remo said you need to set the action to alert. I generally have a URL filtering profile called URL-Alert where most actions are alert so I can monitor what's going on. I find this is very helpful when trying to build a tighter policy as the URL filtering engine allows you to see most FQDNs that are being requested.   Even on an alert profile I always set categories such as phishing, c2, malware et al to block as a layer of protection.     ... View more

Just wanted to echo @BPry comment, awesome that you are hosting this free service, and yes I do agree very much that Minemeld is a very under recognised tool and certainly something that should get more press. ... View more

Take a look at this other livecommunity post here with an alternative source as well as direct URLs for those links used in the original appspot source:   https://live.paloaltonetworks.com/t5/minemeld-discussions/panwdbl-appspot-com-unaccessible/m-p/320582/highlight/false#   Direct URLs that the appspot source was referencing or equivalent source:   Type Name URL Notes IP List Tor Exit Nodes https://www.dan.me.uk/torlist/?exit Grab every 30mins IP List Known Compromised Hosts https://rules.emergingthreats.net/blockrules/compromised-ips.txt   IP List Malware Domain http://www.malwaredomainlist.com/hostslist/ip.txt   IP List SpamhausDrop http://www.spamhaus.org/drop/drop.txt   IP List SpamhausEDrop http://www.spamhaus.org/drop/edrop.txt   IP List BruteForceBlockerList http://danger.rulez.sk/projects/bruteforceblocker/blist.php   IP List DsheildBlockList http://feeds.dshield.org/block.txt   IP List SSLAbuseIPList https://sslbl.abuse.ch/blacklist/sslipblacklist.txt   IP List FeodoTrackerBadIPsList https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt Dridex, Heodo (aka Emotet) and TrickBot botnet command&control servers (C&Cs) IP List TalosIntelIPFilter https://www.talosintelligence.com/feeds/ip-filter.blf Exceeds EDL URL length URL List URLHaus Malware URLs https://urlhaus.abuse.ch/downloads/text_online/ Dynamic URLs that are online ... View more