Browsing All Posts filed under »Palo Alto«

Palo Alto Bug tool kit

July 8, 2022

0

Palo Alto documentation is very good, but I dont like the Palo Alto web page when I am looking for a keyword in addressed issues or in the known issues, since its listed under each PANOS Release on different web pages. If you have to go through 10-20 PANOS Release notes its really boring every […]

Land Attack or configuration failure?

July 8, 2022

0

As you know the Local Area Network Denial (LAND) attack is a type of Denial of Service (DOS) attack in which the attacker attacks the network by sending the same source and destination IPs and ports (like TCP SYN where the source IP and destination IP is from the destination device itself). if you check […]

Using Palo Alto Minemeld behind corporate proxy

November 15, 2018

0

I can only quote now since I am a bit tired: “MineMeld is a threat intelligence processing tool that extracts indicators from various sources and compiles the indicators into multiple formats compatible with AutoFocus, the Palo Alto Networks® next-generation firewall, and other security and information event management (SIEM) platforms.” Here are some more details: minemeld […]

Custom Reporting with Palo Alto Firewall

April 19, 2017

0

The following Application is a nice tool that was built to automate report generation and to make monthly or weekly report analisys where you can find the changes in the firewall events between months or weeks. The Palo Alto Firewall has a great built-in Reporting Service that can generate any kind of custom reports within […]

Automate data collection with SecureCRT

April 11, 2017

0

On a network device sometimes we have to collect outputs of multiple commands that contains a counter within its output. To get a state from those counters in outputs we must issue the commands that generates the output multiple times and we should realise if a specific counter value increasing quickly or slowly or does […]

Application shifting gone bad – Palo Alto Firewall

October 25, 2016

2

The App sophos-live-protection and the Palo Alto dns-proxy Affair As I first met with this problem I just thought its my first vulnerability that I have found :-), but it wasnt! It was the administrator who forgot to go to a palo alto school before touching a palo alto firewall. :-) The firewall I configured […]

Palo Alto troubleshooting commands Part 2.

January 14, 2015

0

This is the part 2 of the troubleshooting commands that can help you better understand what and how you can troubleshoot on Palo Alto Next Generation Firewall in cli.The Part 1. can be found here. 1. Capture and logging specific traffic2. Logging traffic for global counters3. Updates3.1 Applications and Threats update3.2 Software Upgrades3.3 Licensing 1. […]

Custom Monitoring of Palo Alto with Perl and Cacti

August 30, 2014

8

1. The Global Counters The Palo Alto Firewall has released an API, that has some (not all) commands to issue through external programmable interface. This API is based on XML and makes it possible to issue specific commands with that you can check just for example some states of the firewall. Through the API it […]

Palo Alto troubleshooting commands

December 10, 2013

4

Its now a beautiful saturday afternoon outside and I sit here in this boring room and made this post about useful palo alto commands, that can help us in case of a problem arises. There is no wind, I wanted today go to windsurf… With my requirements for any networking layer 3 security device I […]