This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew

About mivaldi

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
mivaldi
‎07-14-2025
since ‎04-03-2014
L7 Applicator
User Activity
User Profile
Latest posts by mivaldi
View All
User Badges
Community Statistics
Member Since ‎04-03-2014 01:35 PM
Date Last Visited ‎07-14-2025 10:52 AM
Posts 746
Total Likes Received 164

Re: False Positive: Virus/Win32.WGeneric.yeksq

by in VirusTotal
‎02-02-2024 10:14 AM
‎02-02-2024 10:14 AM
@tomber You should open a Support ticket for this. This forum is mean to provide assistance to VirusTotal users that are not Palo Alto Networks customers, regarding FP detections by Palo Alto Networks observed in VirusTotal detection reports, and not in firewalls. ... View more

Re: Virus/Win32.WGeneric.eachsz(597618885)

by in VirusTotal
‎08-15-2023 03:48 PM
1 Kudo
‎08-15-2023 03:48 PM
1 Kudo
Yes, the explanation is that the sample was observed by WildFire but never observed by VirusTotal. For the FP investigation please open a Support case. ... View more

Re: Add Multiple DNS Suffixes

by in General Topics
‎04-20-2023 09:28 AM
‎04-20-2023 09:28 AM
This solution was superseded by the ability to set DHCP Options. See article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000saawCAA ... View more

Re: Adobe Reader DC install being treated as a virus

by in VirusTotal
‎02-06-2023 06:41 PM
‎02-06-2023 06:41 PM
This is not related to a VirusTotal issue. This forum section is for non-customers reporting incorrect detections. Please open a Support case or post in the Threat Discussions section. Ref. https://live.paloaltonetworks.com/t5/threat-vulnerability-discussions/bd-p/Threat_Discussions ... View more

Re: DHCP Options

by in General Topics
‎01-23-2023 05:44 PM
‎01-23-2023 05:44 PM
Documented the solution in a Knowledge Base Article: How to implement DHCP Option 119 (Domain Search List) in a Palo Alto Networks firewall ... View more

Re: SSH protocol uses Weak key exchange algorithms in PA 500 for PAN OS 8.1.14

by in Threat & Vulnerability Discussions
‎11-08-2022 03:02 PM
‎11-08-2022 03:02 PM
@GlobalAxis what PAN-OS version are you running? ... View more

Re: How can I submit a false positive malicious file review by e-mail?

by in VirusTotal
‎06-24-2022 01:42 PM
‎06-24-2022 01:42 PM
Why do you want to report it via email? ... View more

Re: NTP and Bittorrent traffic issue

by in VirusTotal
‎06-10-2022 12:45 PM
1 Kudo
‎06-10-2022 12:45 PM
1 Kudo
Also check if the misdetection began around March 15, 2022, that's when the change was pushed in Content. https://live.paloaltonetworks.com/t5/customer-resources/app-id-decoders-enhancement-plan/ta-p/469547   You can test adding ntp-non-rfc as an allowed app in your policy to see if it resolves the issue. ... View more

Re: NTP and Bittorrent traffic issue

by in VirusTotal
‎06-10-2022 12:42 PM
1 Kudo
‎06-10-2022 12:42 PM
1 Kudo
I replayed your PCAP to my lab. I see NTPv4 traffic detected as ntp-base, and NTPv1 traffic detected as ntp-non-rfc. I don't see any bittorrent traffic, but I am running 10.2.2, maybe your PAN-OS identifies it differently. Check the source ports of the sessions identified as bittorrent, and compare them to your packet capture to see if there is a correlation between NTPv1 and bittorrent, versus NTPv4 and correct identifification of ntp-base traffic. It is possible that your firewall is detecting ntp-non-rfc as bittorrent. ... View more

Re: NTP and Bittorrent traffic issue

by in VirusTotal
‎06-10-2022 10:35 AM
1 Kudo
‎06-10-2022 10:35 AM
1 Kudo
Sorry but I don't believe this has anything to do with VirusTotal either. This forum is for non-customers. The Threat and Vulnerability forum may have been a better fit, however, posts in the LIVECommunity expect answers from other Palo Alto Networks customers. If you need a response from Palo Alto Networks Support, the correct avenue for help is filing a Support ticket. ... View more

Re: No change in retention of summary log after the log storage allocation update

by in General Topics
‎05-05-2022 03:58 PM
1 Kudo
‎05-05-2022 03:58 PM
1 Kudo
I'm not familiar with this topic. ... View more

Re: Critical System Log Msg

by in General Topics
‎05-03-2022 03:18 PM
‎05-03-2022 03:18 PM
I've seen this in the past caused by issue PAN-99976, but it could be something entirely different. Please open a case with Support. You will likely need to submit the crash info file. ... View more

Re: Threat ID 52019

by in Threat & Vulnerability Discussions
‎11-24-2021 08:31 AM
‎11-24-2021 08:31 AM
Please open a Support case. ... View more

Re: Polymorphic virus cannot be detected in wildfire

by in Threat & Vulnerability Discussions
‎10-27-2021 02:23 PM
‎10-27-2021 02:23 PM
We've worked on our detection logic in WildFire to improve coverage of these samples. Thank you for reporting the issue. ... View more

Re: How to block a specific file with hash value?

by in Threat & Vulnerability Discussions
‎10-19-2021 01:55 PM
1 Kudo
‎10-19-2021 01:55 PM
1 Kudo
Yes, you can enable extended logging in WildFire > debug wildfire upload-log log extended-log yes  The computed SHA256 hash of files inspected by the WildFire Analysis Profile for wildfire forwarding will be written in the wildfire-upload.log log-file in the MP. To visualize it use command: > less mp-log wildfire-upload.log ... View more
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎07-14-2025 10:52 AM
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2025 - Palo Alto Networks