PaloAltoNetworks / iron-skillet

IronSkillet is a set of day-one configuration templates for PAN-OS to enable alignment with security best practices. See the Quick Start section below to get started using the template configurations.
MIT License
200 stars 104 forks source link

Default value in iron_skillet_panos_full.xlsx is wrong for sinkhole #177

Open anbohm opened 6 months ago

anbohm commented 6 months ago

Describe the bug

Default value in iron_skillet_panos_full.xlsx is wrong for sinkhole (11.0 branch)

Expected behavior

The set commands in Excel should work out of the box if i want to use PaloAlto Sinkhole.

Current behavior

Now I get commit error on Spyware. Invalid ipv4-address for sinkhole.

Possible solution

Change row B12 "sinkhole.paloaltonetworks.com" to "pan-sinkhole-default-ip" With correct default value the commit works

Steps to reproduce

  1. Download Excel file iron_skillet_panos_full.xlsx
  2. Copy row 205 to 388 and paste it into firewall ssh session.
  3. Commit FW and check for warning on the commit.

Context

Want Iron-Skillet to be as ready as possible out of the box, more easy to use.

Your Environment