Hi All,
I have heard of people using MineMeld to mange custom URL white lists.
What are people's opinion on this ? Is it a good idea ? Is there a better way ?
Thanks!
-Alex
top of page
All things Palo Alto Networks
Forum: Forum
bottom of page
All things Palo Alto Networks
FFS I didn't read the headline.... DAMN IT
I was about to say they haven't killed it off, as they initially stated it would just move to "community supported" but it now looks like they took out the community pages :/ too bad
Sadly, in typical PA fashion they have made Minemeld end of life in favour of some paid for products, are we surprised??
Anyway I still run MM and aggregate lots of bad IP's and feed them into my PA's and it works nicely.
Just a shame PA killed it off.
Hi Alex It depends on your needs The hosted EDLs cover most of the basics. If you have a threat intelligence feed from a third party, or need several custom url/IP lists, it is worth setting up MineMeld. If you just need the 0365 urls/IPs, go with the hosted EDLs
Thanks Tom,
Would you recommend using a MineMeld list combined with EDL Hosting Service ?
https://docs.paloaltonetworks.com/resources/edl-hosting-service
-Alex
If you already have MineMeld setup, it's certainly a good way to manage (centralize) a custom whitelist If you havent set it up and don't have a need for other aggregation and centralized EDLs, you can also put a flat text file (one entry per line) on an internal webserver