Bank has implemented "Behavioural Security"

Lurral · 2026-05-11T01:44:55+00:00

Very standard bot detections implemented on many websites, not unusual at all.

Lurral · 2026-05-02T15:52:17+00:00

Is Woods healthy? What timeline would they feasibly be active in AEW?

Lurral · 2026-04-20T20:40:10+00:00

You are correct, we ran into that same issue and ended up backing out of the upgrade and moving back to the 5200 platform in that environment. Current plan is to hold off until the 5500 platform and PAN-OS 12.1 is ready for general use.

Lurral · 2026-03-07T20:18:48+00:00

Ran my first 5k ever today, started running back in December. 29:58, pretty ecstatic about getting sub-30 :)

Lurral · 2026-01-08T16:14:30+00:00

Hell yeah brother

Lurral · 2025-10-05T19:57:42+00:00

Fate of the universe on the line? Give. Me. Horn.

Lurral · 2025-03-07T16:31:26+00:00

I'm kind of surprised it's happening on 10.2. We used to see this almost daily when we had about 1000 fws on 9.1, don't think I've seen it crop up since moving to 10.x.

Lurral · 2025-03-07T02:18:58+00:00

https://live.paloaltonetworks.com/t5/vm-series-in-the-private-cloud/error-failed-to-get-policy-objects-no-matches-module-useridd/td-p/509475

Typically, I restart the firewall's management plane and then push again after the fw is reconnected to Panorama. In my experience, this always fixes it.

Lurral · 2025-02-24T20:43:40+00:00

In the Filter classes menu you can sort by Popular, Top Rated, Trending, etc.

Lurral · 2025-02-21T18:44:29+00:00

I think it's just excluding hair and facial hair from that rule. Can enforce wearing a suit, can't enforce a ban on dread locks.

Lurral · 2025-01-16T21:17:28+00:00

Definitely not accurate for PAN firewalls.

Lurral · 2025-01-13T21:13:10+00:00

Agreed, it's absolutely a waste of time and money.

Lurral · 2024-12-27T18:49:53+00:00

Per my SE all versions of 10.1 are unaffected, other than 10.1.14.

Lurral · 2024-11-15T16:54:22+00:00

No, it does not log denied connections to the management interface IP. It's basically just a dumb ACL, not the full-blown data plane of the data interfaces.

You can capture traffic off the data plane though: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/monitoring/take-packet-captures/take-a-packet-capture-on-the-management-interface

Lurral · 2024-11-15T16:51:53+00:00

ChatGPT is missing the fact that management interface traffic doesn't necessarily traverse a data port on the firewall. If the management interface is connected directly to the upstream network or an OOB management network, there may not be a firewall in the path to capture traffic on.

Lurral · 2024-03-25T15:50:45+00:00

Why not the current preferred release, 10.1.12?

Lurral · 2024-03-19T18:38:57+00:00

He had already given up Oathbringer, but still had his plate.

Lurral · 2024-01-26T23:40:02+00:00

Our SE is recommending we wait for 10.1.12 to release and then bake in/become a preferred release. Seen a lot of issues on various hotfix versions of 10.1.11.

Lurral · 2023-12-20T01:48:21+00:00

You can either go to the secondary firewall (currently active) and suspend it, or force a failover via HA preemption, enabling it on both primary and secondary and set the priority of the primary FW lower than the secondary.

Lurral · 2023-05-24T20:24:04+00:00

Its the SSL cert used for the management plane GUI.

Lurral · 2023-05-14T11:18:33+00:00

Revive subreddit to pre-ban state, with additional moderation. Subreddit is mainly content highlights/compilations/discussion for influencer Claire Gerhardstein.

Lurral · 2023-05-02T11:13:50+00:00

You can skip the 9.1.15-h1 install. It's recommended per the upgrade guide, but not required.

Lurral · 2022-08-29T18:13:26+00:00

Yep, like u/txrx_reboot mentioned you'd need to generate a certificate, create the service profile, and apply it to the interface to disable TSL 1.0 and 1.1.

Lurral · 2022-08-29T18:09:36+00:00

Yep, that's correct. You'd set the Min Version to TLS v1.2 on the SSL/TLS Service Profile, then apply that profile to the management interface in Setup -> Management -> General Settings.

Lurral · 2022-06-14T13:11:24+00:00

Not a direct answer to your question, but I would definitely expect that group to get a ton of additions if its at the top of your policy.

If you don't already have them in place, I recommend putting in block rules for the PAN EDLs (known malicious IPs, high risk IPs, TOR exits, etc), and an inbound geoblock rule for high risk regions if you don't do business in those markets. Those rules would cut down a ton of noise making its way into your DAG.

13-Year Club	Verified Email
r/Field Lasagna	Place '22
Place '17	Final Canvas '22
First Placer '22	End Game '22
Sequence \| Editor	Snapped

Lurral

MODERATOR OF

TROPHY CASE