The first TCP Handshake will be allowed if you are using destination TCP/UDP port-based rules with APP-ID. The Palo will...
Back in March of 2020, TLS 1.0 and 1.1 were deprecated and you shouldn’t be using it. TLS 1.2 is...
Step 1: Download one of the malware test files. You can select from PE, APK, MacOSX, and ELF. If you...
Used the “test decryption-policy-match” command: corderoPA-A(active)> test decryption-policy-match source {SOURCE-IP} destination {DESTINATION-IP} Matched rule: 'Do Not Decrypt' action: no-decrypt...
This command is a good one that I use often. There are time I want to see if a route...
From Palo Alto’s Website: Environment All PAN-OS Anti-Virus license Resolution What is Ransomware? Ransomware is a family of malware...
Below are the entries you might see on the Palo and wonder what they mean: Incomplete Insufficient data Not-applicable unknown-tcp...
Keep in mind, this information will be logged as well, so you can query your logs. Here is a list...
There are two good commands to run:...
Something to keep in mind is when you ping from a Palo Alto firewall via the CLI, it’s going to...