About CoreySteele

Some of my customers get lists of hashes of files that are bad but that don't show up in antivirus or malware detection systems.  E.g. from DHS, FS-ISAC, etc.  The point is, the protections available to me via a PA are essentially wildfire (i.e. hoping someone else gets hit before me), or threat protection (e.g. antivirus and IDS signatures).  But if neither of those catch the bad thing, I'm boned.  -C ... View more

Since this question was originally asked in 2012, I would *HOPE* some progress has been made on this... I was working with a client today who requested this and I went to write a custom report and was astonished that I couldn't find an easy solution to providing this report.  Why would the Configuration and System logs be exempt from the Custom Report builder?!?!?  This makes NO SENSE as an end-user.  I'm sure there's either a technical reason or a really (really) poor business reason, but either way, this seems like a reasonable and somewhat essential request.  Cheers, Corey ATTN: mlutgen ... View more

As long as you have solid, real-world experience with PAN-OS, including dynamic routing (e.g. BGP and/or OSPF), good networking fundamentals, and know the product line well, you should be able to get by with reading the design recommendation guides a couple of times, spending some time on the GUI, and reading-up on Panorama.  That's basically what I did.  Mind you, I have installed a couple of dozen PA boxes because I work for a VAR, so my experience is a bit unfair compared to someone who's married to a single install. ... View more

FYI, DOC-1163 is officially titled "How to Configure and Troubleshoot IPSec VPNs"... sounds like the kind of doc one would want to read in preparation for the CNSE.  *sigh* ... View more

As I have been preparing for the CNSE I have observed that there are several documents referenced in the official "Study Guide" that flat-out don't exist... a prime example would be https://live.paloaltonetworks.com/docs/DOC-1163, which resolves to a 404.  Unfortunately, in the Study Guide, it says of this document, "There are two docs, read the one titled 'How to configure an IPSEC VPN' - there are a number of questions on IPSec, you should definitely follow this doc to configure a tunnel."  Great advice, but the freaking document doesn't bloody exist!  The title of it in the Study Guide is "Tech Note - How to configure site2site IPSec 4.0.pdf"  If anyone can find that, please let me know.  😉 Cheers, -C ... View more

I'd like to create a custom app-ID signature to allow me to block all use of IE on the network... I'm having trouble with the regex for the user-agent string... anyone care to help? :smileyblush: ... View more

Is that to say that 6.0.x haven't included new IPv6 features?  I will check the release notes to verify. Thank you, Corey ... View more