About kevin_thys

Hi Luigi,   Can we still do some remote session to see what is going wrong?   Greets ... View more

Yes, I can do the session friday 24/02 around 09:00? ... View more

Hi Luigi,   I tried splitting the list but still getting error that maximum in the list is exceeded.   Config firewall: xxx-Ransomware-IPv4-01 { recurring { hourly { at 45; } } url https://ip/feeds/xxx-Ransomware-IPv4?n=4600; type ip; description "Ransomware Minemeld list Medium confidence level"; } xxx-Ransomware-IPv4-02 { recurring { hourly { at 46; } } url https://ip/feeds/xxx-Ransomware-IPv4?s=4600&n=4600; type ip; } xxx-Ransomware-IPv4-03 { recurring { hourly { at 47; } } url https://ip/feeds/xxx-Ransomware-IPv4?s=9200&n=4600; type ip; }   Running lateste Minemeld and PAN-OS 7.0.9.   Error received when commit is done: EBL(vsys1/xxx-Ransomware-IPv4-02) Exceeding max number of ips at line 4701 When I check in CLI it is starting at 4600 but not ending untill the end of the list. I think that the parameter is n=4600 is not working.  ... View more

Superb implementation! Thanks @lmori ... View more

Hi,   Ok you can indeed inspect the configuration of each miner. Having table overview where you can sort based on level, stable/experimental and share color would be nice feature for upcoming release maybe.    Greets, Kevin ... View more

Hi,   Having the add sign by default would be usefull when setting up the configuration.  ... View more

yes we upgraded to 6.1.7 to solve this issue. Was quite ok for some time longer as before but now we received it again. Case is open.  ... View more

Hi, The WF signature database on the devices don't have all signatures. So if your file is malicious that indicates a file was inspected by WF and with hash check your firewalls knows this verdict. But to block the file it needs to have a signature in the WF database on your device. If the algorithm to select signatures being in the WF database not selected the signature for your file, your device will not be able to block it. If the file is triggered the WF algorithm will select the file again to be in the WF database that is pushed towards the devices in one of the next updates. Then you will see it gets blocked. That is how it works in fact, of course a bug is also possible Regards, Kevin ... View more