The IP Block List Feed feature is enabled by-default from the Objects Tab>External Dynamic Lists, following upgrade to PAN-OS 8.0, along with an active Threat Prevention License + Supported AV Content. A Predefined IP List however (retrieved via AV updates), will always be counted as an active object, whether applied to a Security Policy or not. If a list is not in-use (unless Predefined), the objects referenced on a particular list will not be tallied. An Active Threat Protection License is required on the Palo Alto Networks firewall for the lists to be made available/visible.Įxternal Dynamic Lists now include an option to 'List Capacities.' This provides a visual queue that includes Total Device Capacity as well as how many objects are currently utilized/active within a Security Policy.This feature will be supported on M-100, M-500, VM Panorama, and PAN-OS devices. Palo Alto Networks - High-risk IP addresses: This list includes IP addresses that have recently been featured in threat activity advisories distributed by high-trust organizations howeve,r Palo Alto Networks does not have direct evidence of maliciousness.This list has been verified by our threat research team to be malicious. Known malicious IP addresses:This list includes malicious IP addresses that are currently used almost exclusively by malicious actors for malware distribution, command-and-control, or for launching various attacks.Palo Alto Networks will provide two lists of IP addresses to customers delivered as content to be used in External Dynamic Lists based on information from our threat intelligence.IP Block List Feeds, available in PAN-OS 8.0, provide admins with an enhancement to the External Dynamic Lists feature to further reduce the attack surface. Just when you thought External Block Lists (formerly Dynamic Block Lists) couldn't get much better, PAN-OS 8.0 takes it a step further. If you’d like to learn more about this topic or PAN-OS 8.0 in-general, you’ll also want to check out our world-class Technical Documentation. This article highlights a new capability or feature introduced in PAN-OS 8.0.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |