Scribd Logo
Upload

Welcome to Scribd!

  • 92 views

    FW Palo 01

    Uploaded by

    Tom Ev'andre
    The document displays a log of security threats detected on a network. It lists the receive time, threat type, threat ID/name, source and destination zones and addresses, and source users for each threat detected, including suspicious DNS queries and vulnerabilities like buffer overflows. The threats were detected by various security monitoring and protection mechanisms like URL filtering, wildfire submissions, data filtering, globalprotect, and more.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    FW Palo 01

    Uploaded by

    Tom Ev'andre
    92 views1 page
    The document displays a log of security threats detected on a network. It lists the receive time, threat type, threat ID/name, source and destination zones and addresses, and source users for each threat detected, including suspicious DNS queries and vulnerabilities like buffer overflows. The threats were detected by various security monitoring and protection mechanisms like URL filtering, wildfire submissions, data filtering, globalprotect, and more.

    Original Title

    FW-PALO-01

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document displays a log of security threats detected on a network. It lists the receive time, threat type, threat ID/name, source and destination zones and addresses, and source users for each threat detected, including suspicious DNS queries and vulnerabilities like buffer overflows. The threats were detected by various security monitoring and protection mechanisms like URL filtering, wildfire submissions, data filtering, globalprotect, and more.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    92 views1 page

    FW Palo 01

    Uploaded by

    Tom Ev'andre
    The document displays a log of security threats detected on a network. It lists the receive time, threat type, threat ID/name, source and destination zones and addresses, and source users for each threat detected, including suspicious DNS queries and vulnerabilities like buffer overflows. The threats were detected by various security monitoring and protection mechanisms like URL filtering, wildfire submissions, data filtering, globalprotect, and more.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 1

    DASHBOARD ACC MONITOR POLICIES OBJECTS NETWORK DEVICE

    Logs ( severity neq low ) and ( severity neq informational )

    Traffic DEST
    Threat RECEIVE TIME TYPE THREAT ID/NAME FROM ZONE TO ZONE SOURCE ADDRESS SOURCE USER ADD

    URL Filtering 11/29 10:56:40 spyware Suspicious DNS Query (generic:tag.adincube.com) MPLS LAN 10.28.32.76 andr
    WildFire Submissions
    11/29 10:56:40 spyware Suspicious DNS Query (generic:tag.adincube.com) MPLS LAN 10.28.32.76 triton
    Data Filtering
    HIP Match 11/29 10:56:31 spyware Suspicious DNS Query (generic:tag.adincube.com) MPLS LAN 10.28.32.76 andr
    GlobalProtect
    11/29 10:56:31 spyware Suspicious DNS Query (generic:tag.adincube.com) MPLS LAN 10.28.32.76 andr
    IP-Tag
    User-ID   11/25 10:29:04 vulnerability Microsoft Windows DNS Client Buffer Overrun Vulnerability MPLS LAN 192.168.71.10 andr

    Decryption   11/25 10:28:46 vulnerability Microsoft Windows DNS Client Buffer Overrun Vulnerability MPLS LAN 192.168.71.10 andr
    Tunnel Inspection
      11/25 10:18:02 vulnerability Microsoft Windows DNS Client Buffer Overrun Vulnerability MPLS LAN 192.168.71.2 andr
    Configuration
    System   11/25 10:13:31 vulnerability Microsoft Windows DNS Client Buffer Overrun Vulnerability MPLS LAN 192.168.71.10 andr
    Alarms
      11/25 10:12:32 vulnerability Microsoft Windows DNS Client Buffer Overrun Vulnerability MPLS LAN 192.168.71.10 andr
    Authentication
    Unified   11/25 10:12:14 vulnerability Microsoft Windows DNS Client Buffer Overrun Vulnerability MPLS LAN 192.168.71.10 andr

    Packet Capture   11/25 10:11:58 vulnerability Microsoft Windows DNS Client Buffer Overrun Vulnerability MPLS LAN 192.168.71.10 andr
    App Scope  
    11/24 14:32:10 spyware Suspicious DNS Query (generic:a.browserspeed.support) MPLS LAN uranus.berkem.com berkem\user triton
    Summary
    Change Monitor 11/24 14:32:10 spyware Suspicious DNS Query (generic:a.browserspeed.support) MPLS LAN uranus.berkem.com berkem\user triton
    Threat Monitor
      11/24 12:09:47 vulnerability TightVNC Buffer Overflow Vulnerability LAN MPLS hptour76.berkem.com berkem\f.roslais 10.2
    Threat Map
    Network Monitor   11/24 11:57:26 vulnerability TightVNC Buffer Overflow Vulnerability LAN MPLS hptour76.berkem.com berkem\f.roslais 10.2

    Traffic Map   11/24 11:33:41 vulnerability TightVNC Buffer Overflow Vulnerability LAN MPLS hptour76.berkem.com berkem\f.roslais 10.2
    Session Browser
      11/24 11:32:09 vulnerability TightVNC Buffer Overflow Vulnerability LAN MPLS hptour76.berkem.com berkem\f.roslais 10.2
    Botnet
    PDF Reports 11/23 09:08:13 spyware Suspicious DNS Query (generic:gmu-apps.com) LAN ADISTA andromede.berkem.com ns-ca
    Manage PDF Summary
    11/22 12:49:19 spyware Suspicious DNS Query (generic:supapush.net) MPLS LAN 192.168.69.31 andr
    User Activity Report
    SaaS Application Usage 11/22 12:49:16 spyware Suspicious DNS Query (generic:supapush.net) MPLS LAN 192.168.69.31 andr

    Report Groups 11/22 12:49:16 spyware Suspicious DNS Query (generic:supapush.net) MPLS LAN 192.168.69.31 andr
    Email Scheduler
    11/22 12:49:16 spyware Suspicious DNS Query (generic:supapush.net) MPLS ADISTA 192.168.69.31 172.
    Manage Custom Reports
    Reports 11/22 12:49:16 spyware Suspicious DNS Query (generic:supapush.net) MPLS ADISTA 192.168.69.31 172.

    11/22 12:49:11 spyware Suspicious DNS Query (generic:supapush.net) MPLS LAN 192.168.69.31 andr

                   

     
     
     

     
     

     
     
     

     
    1 2 3 4 5 6 7 8 9 10  

     
     
     

     
     

     
     
     

     
    Resolve hostname Highlight Policy Actions

     admin   Logout Last Login Time: 11/30/2022 10:20:04 Session Expire Time: 12/30/2022 10:20:09

    You might also like