This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About aaobuhov
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About aaobuhov
04-14-2022
27Posts
1Like
1Solution
Apr 14, 2022Last Visited
User
Activity
User
Profile
Latest posts by aaobuhov
| Subject | Views | Posted |
|---|---|---|
| 1629 | 10-06-2020 06:56 AM | |
| 4877 | 03-18-2020 06:30 AM | |
| 4895 | 03-18-2020 06:17 AM | |
| 5180 | 03-18-2020 01:18 AM | |
| 2466 | 01-30-2020 09:35 PM | |
| 2716 | 01-29-2020 09:13 PM | |
| 1488 | 10-28-2019 05:36 AM | |
| 5433 | 10-26-2019 02:57 AM | |
| 5525 | 10-25-2019 04:05 AM | |
| 2439 | 07-22-2019 02:49 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 01-29-2020 09:13 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 7 Likes | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 09-19-2018 04:22 AM |
| Date Last Visited | 04-14-2022 08:36 AM |
| Posts | 27 |
| Total Likes Received | 1 |
10-06-2020
06:56 AM
Hi I have a same problem with allow downoloading zoom client. It downloading from random address, resolved as "something".cloudfront.net. Not from ip-range from document: https://support.zoom.us/hc/en-us/articles/201362683-Network-Firewall-or-Proxy-Server-Settings-for-Zoom I also want to know the opinion of experts
... View more
03-18-2020
06:17 AM
Thank you for reply I prefer " No-Decrypt URL category" too. Can i summarize your list to: *.apple.com *.cdn-apple.com It will be a less strict list. Is such version possible? Andrew
... View more
03-18-2020
01:18 AM
Hi, BPry >Whitelist the following: >.... Is this list actual? You mean path "Device -> Cert mgmt -> SSL Decription Exclusion" and add all listed domains one by one? Or "Policies -> Decryption -> New rule" and add rule with custom URL category. Andrew
... View more
01-30-2020
09:35 PM
Issue was resolved. Thanks you.
... View more
01-29-2020
09:13 PM
1 Kudo
I receved notices message about new URLs that are categorized specifically as grayware or cryptocurrency. But FAQ for the test URLs and for more information about this change is not avaiable: Blog Not Found The blog you are trying to access is not available. Return to my original page (https://live.paloaltonetworks.com/t5/Blogs/New-URL-Filtering-Categories-Grayware-and-Cryptocurrency/ba-p/293761). Is it my or common problem?
... View more
10-28-2019
05:36 AM
Hi If you can't create case at step3, please check column "NOTES" For example: Support provided through "Company Name", Email, Phone, Site. For technical support, you should contact the data indicated in the "NOTES" column. Hope this helps.
... View more
10-25-2019
04:05 AM
Hi, I found, what End-of-Life Date for PAN-OS 8.0 is October 31, 2019 https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary We are using version 8.0.13 with active subscriptions. 1. Will we receive updates (Antivirus, Threat Prevention, PAN-DB URL Filtering) after October 31. How long? Or do we urgently need to upgrade to 8.1? 2. What is the stable version 8.1? Thanks, Andrew
... View more
07-22-2019
02:49 AM
Hi 2 all We have working Agentless User-ID and User-Based and Group-Based Policy Special AD-account, "pauser" have necessary permissions. I found, what its login and password is configured in Device > User Identification > User Mapping > WMI Autentication Device > Server Profiles > Ldap > "Name of LDAP Profile" I need to change password for this domain account. Tell me, please, how to do this most painlessly. What should be the sequence of steps? Thank.
... View more
01-31-2019
01:19 AM
Thanks, ShaiW. Good idea. Creating a separate application for each file mask seems to me not correct. Is it possible to make same in Custom Objects -> Vulnerability for this scenario?
... View more
01-30-2019
11:32 PM
Tested this feature by downloading a specific pdf file from a non-SSL site. For a category that includes this site i set - alert. For Custom URL "*/test.pdf" - block When accessing a file by link or downloading, the category does not change, there is no lock. Alert in log. For interest added to the Custom URL site: testsite.com * .testsite.com When i access the site, in the logs i see that its category has changed to Custom and access to the site has been blocked. Thus, this solution does not work.
... View more
01-30-2019
05:37 AM
Thanks for reply. As far as i know, sites are not an SSL, but it is about hundreds of URLs. Common - file name only. */abc.jpg - is this part will be enough for URL? >it should see the URI path and you should be able to add the URL to custom URL category which you can then override and block. You tell about "Profiles -> Url Filtering"?
... View more
01-30-2019
02:56 AM
We received an alert about the behavior of the virus. The malicious loader is downloaded from the URL of compromised legitimate sites, where it is disguised as an image. The URL by which the malicious loader is hosted, all addresses end with the string abc.jpg. The string in the URLs where the encryptor is hosted is: hxxp://[anything]/abc.jpg I read that "File Blocking" does not block files by masks. Is it possible to block the address by the mask "*/abc.jpg" by creating a Custom URL Category? If yes, then this category is better to connect to Policies -> URL Category -> Action: Deny Either in Profiles -> Url Filtering Ready to discuss other options.
... View more
12-10-2018
09:58 PM
Thank you, Otakar.Klier >If you disable the extended packet capture on the polices that are medium and higher, these warning will go away. It works. But i don't understand something. In the document that I quoted, reset-both is recommended, not block. Security Policy with these profiles allows traffic. For example: Warning: The action is block for rule "simple-critical" in anti-spyware profile "Best-practice and sinkhole" with extended packet capture enabled. Only the first packet will be captured. Action is not block, but reset-both. Settings are made according to the manual. 1. Warning should be expected when Commit? 2. Error in the document or mismatch of versions (8.0, not 8.1), restriction for VM-versions? 3. Do I actually need extended packet capture?
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks