From cf1dd029d73a1bf7cc8117eb24f4370537d7d75f Mon Sep 17 00:00:00 2001
From: ptglynn <pglynn@paloaltonetworks.com>
Date: Wed, 29 Nov 2017 10:02:32 -0600
Subject: [PATCH] Add files via upload

---
 two-tier-sample/azure-sample.xml |  50 +------------------------------
 two-tier-sample/azurensg.zip     | Bin 0 -> 1318 bytes
 two-tier-sample/azurexff.zip     | Bin 0 -> 1634 bytes
 3 files changed, 1 insertion(+), 49 deletions(-)
 create mode 100644 two-tier-sample/azurensg.zip
 create mode 100644 two-tier-sample/azurexff.zip

diff --git a/two-tier-sample/azure-sample.xml b/two-tier-sample/azure-sample.xml
index 15281ad..619618b 100644
--- a/two-tier-sample/azure-sample.xml
+++ b/two-tier-sample/azure-sample.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0"?>
-<config version="8.0.0" urldb="paloaltonetworks">
+<config version="7.1.0" urldb="paloaltonetworks">
   <mgt-config>
     <users>
       <entry name="paloalto">
@@ -75,52 +75,6 @@
         <technology/>
       </application-type>
     </content-preview>
-    <log-settings>
-      <http>
-        <entry name="quarantine">
-          <server>
-            <entry name="Azure">
-              <address>your.function.url</address>
-              <http-method>POST</http-method>
-              <protocol>HTTPS</protocol>
-              <port>443</port>
-            </entry>
-          </server>
-          <format>
-            <threat>
-              <url-format>/api/myfunction1</url-format>
-              <headers>
-                <entry name="content-type">
-                  <value>text/html</value>
-                </entry>
-              </headers>
-              <payload>TenantID=azure tenant id
-&amp;ClientID=service principal id
-&amp;ClientSecret=service principal password (!URL encoded!)
-&amp;SubscriptionID=azure subscription id
-&amp;ResourceGroupName=resource group name
-&amp;NetworkSecurityGroupName=NSG of subnet to quarantine
-&amp;Region=azure region
-&amp;Attacker=$src</payload>
-            </threat>
-          </format>
-        </entry>
-      </http>
-      <profiles>
-        <entry name="quarantine">
-          <match-list>
-            <entry name="quarantine">
-              <send-http>
-                <member>quarantine</member>
-              </send-http>
-              <log-type>threat</log-type>
-              <filter>(subtype eq vulnerability)</filter>
-              <send-to-panorama>no</send-to-panorama>
-            </entry>
-          </match-list>
-        </entry>
-      </profiles>
-    </log-settings>
   </shared>
   <devices>
     <entry name="localhost.localdomain">
@@ -394,7 +348,6 @@
               <accept-dhcp-domain>no</accept-dhcp-domain>
             </dhcp-client>
           </type>
-          <server-verification>yes</server-verification>
         </system>
         <setting>
           <config>
@@ -672,7 +625,6 @@
                       </vulnerability>
                     </profiles>
                   </profile-setting>
-                  <log-setting>quarantine</log-setting>
                 </entry>
                 <entry name="Log default deny">
                   <to>
diff --git a/two-tier-sample/azurensg.zip b/two-tier-sample/azurensg.zip
new file mode 100644
index 0000000000000000000000000000000000000000..460b86740fb241f662b038d012418d835f3e4011
GIT binary patch
literal 1318
zcmWIWW@Zs#U|`^2SU9`Pd)ucE$+<w@P9PRzkYPxyDlJOQD^Ax>E6qzT$;{8w%PP*#
z3k~69V2)D}iz>e<7gbup&A`Z#ZNOB{lAvGCUA@1$-gG*XfQD-7v!yA|mWpdfYPvML
zIxLVn$Fy2=rH%*dDecrLQ$$)sQkN}XE~fc%f!0ayGpyR0Ub-&Ry-w<Q`RbiKbDsHR
z`m=@J&zDV0d9u9WZFqpz34Oi5ON^J6s(Nv4ENI=D5T+BZE6xxAcYLLPt@nhl%WWf>
z85q1c7#R4G9bZ(Mr&mx3c6Axh#TA&YUK@7b|F(fZ-TC;$uSXNNc-}m{%q!#73bP46
zwr;agZ1E`)>A%9a%~`YKe{FeZtW)$igSRVBmd`)`eE0iet>;V4`fe`mP5Hbc+`s(X
z)Yd(m>-Vn>d$`lcRa<FI_o7Q4Pm}7_xawW)`MV<I*^;mtb*-(XY;r{pS#Gbttirk}
zXN`Bj#%-J{+%vcAdUE1XxOFGv#N*c1fhIEZdk(%jmC~SXDVoBbX(jG;CV}si>P)i<
zI!jJ{J*37Jb87L61rsD@IiwwUxar!r>3d`!hX;yW`fsvJ%m1j%HSrvQjL^wXGq%|N
zzSv<A9FQcf{@{qDmHMV?gV%E!grAGtahhGNv(xC3uD#9|Wx1y_Ld?yKH!W$*3HxGq
zt0cAU{Oq*~Qy#T*Tz25HoxJL9-J5?$f6Q>wOy8YzwK<k$%ZfX9pI>=d9bmG|d5)1p
z_Y?7B`Z_c26|~)b%zW(h(%pyW?&^`xcq;J5ce-kT%M^{1J^?FV2Ip^#_>#AE=J$a9
z1x9n7`?}*6pE$VZ$f?<Pj`dI2%$TjowK@Iko^`2y3k__Jq_dsgSGGl+jfvNE^5gX)
ztxxm2a~CfSWm<2o^C+A(&2r`Hj6ajsoa(7<T=CII`_&fn=pu``^ZY+t;mZ1b<Vx0g
zr+Ax?gxEWl_OpGgW82og+qA)Z`p-5cY5$n4R8Qrvha`6}9F_Ry$1~x3bn|ng#TOSX
zo$O>~uxLk{d*BffW%o462<xSiO4>R*o-8`H{`JFcqL((Us#ten^~`zOU6P_NZQh!4
zZHd<*!(48&HNLlnHk$kj4C1~dJX13F>ss$Ux<Oly%K5J2=XKLu>wY|x(X4g_i>9;I
z4>hlw)koHDIP>@X-@W>K|6Px(&yT%UKUqJvWyxa2TTaqHV-~yYVodztx8T;Tw{EVr
z*MAztEUawh>WWu7W>xV{sAqD5HM5&Xv*p~EOcT#7_uI}mdl~O%ndq$ZymwBi_q5+W
zHo0iZjF3{(*Jrl-oZZ7I)fiP~HhtdX_C%d4JljMz*tW?F_^x#;Sbv{ia%pCd!<Ega
z?!NGPD%-QyZT<hOdEHaXSIqx^(ERK2{)=h<HkO{QSW;_Vk>Py!{R(&G|5EQROt{5=
zdViftoP6DTHU2i~!}~9(ue0O#TK~Ju;&sdFobPutU&=Scn;eSc*-^jv*dN9KZ$>6L
zW?Th~1hAN4U|<B|C5<2!uHuFjQrw^wHOOXT=6__f_ad7OD-D2#f=UAnLs{8CPGJJV
LjX*k{1;hgY4~H_!

literal 0
HcmV?d00001

diff --git a/two-tier-sample/azurexff.zip b/two-tier-sample/azurexff.zip
new file mode 100644
index 0000000000000000000000000000000000000000..a04756dec6197c83e74438bdade672d4b77a5aa5
GIT binary patch
literal 1634
zcmZ{kdpOez7{`B`tzyb;jU2a}5yo6A>n1`NQMt`ZZlhr%xs2sjlT;^{TvCWwQ}fIv
z%v_pM?rn!5x6Tgh=rW}cN^*40bI#LKPtW^&pZ9(L`8?mhJ}y`Z2pj-_4M5-ZXl(uL
zJAcyJ$5{&kPyu}7q9O>Cz(B*mD6)SfF^r53J{?AObCm=nMl=y#E2{{vC<+V!K|+kc
zF%Tca7#NjHP28RbmetWBOwj|T=!z(uuJt*a{l&^WFjM!Az8$n1Maa&E)8K^L3<g5?
zRk2<dwik-hbuh5bbLi4{a6)(W@+G>0rb@6cZs!I(XC%GxaM9~DL?7-4_0zQ+q^iSH
z>U`YwJq#29m;cMVXT@OWtAr9c5CABL0f5Z6<s+iV=<wKoTKf|ey$Eahu62t$-dSV|
zPgtx};(&LXnD3-`BAI?M3Y(>pH?GUogk#<#xA;+ed#`1D`BcPNva&-BIM_(#V;1KM
zduU}C0{AdlE<SF`48=cN*04uW-@dcf!yDsVfhpCE!z!r5&KsK)Se`vvkS1%F`=KYp
zsQF43B)&saQ<9Ak_t@z1BH$WSiUp>rsG!}rtzgVO`>OE0tqGc(DiT*Mzo}O^aV2rL
zzsF*m<uHb;x`Mg*Fw#-Ie{fgAm&Qge_p`hfyOPa6k?L!%{Mn8>Khw|V4L*x7KV-{f
z-hBU2rv+~@UU_BJ?&(1RXePaAD{XLg>EN(rXpf$GATHbQRkZTs*<h4r8sSr|Y?eTr
zbh6g7bAK1AsLae=S;!|J;(ALbVNN&)6325M(Pc3fL^i3?ap>My#<69O>aJ57zo}<Y
zEUrsh-AnSX=03d9x)AxLs72=dpTRR9xSNst93KSLwo+F>vfjp`VrU*qm`rWbZgm<>
zJ(}5(*_suyA-uQL$*R=zgnXlhE!5%h4r<GlM;gQ85207>oddx!KAFv3FP}<FWK71*
z7|mtVB7PrIo99eW9-PdaduDmfN++}1<)T0rxy<)f&wn}EKCzn~Q)0Hl7M2JS(i_p}
z`BliR)zD1KNcDZGjg$H#=u?iKMvPF^YRW3THB_Mio%h7XRQ`bX67&mZAveek&VW|v
zTs=ZYNTL~U!?u4KQ<mmeP5a<<8VsYEs>C|?!sW3u=q)!LpUp2!`iEHvbj`R0%}RVZ
zjlK4zdpdfxV#^dQ#gDAsF$(jmXZ2V?qjM7U)#Qk>X<#d3OP(k=`kIW;tRo+0vc5cY
zQk2UNhc_9}b4;@&1JbdCIx&ycrv<^*q|hdcO-P?FoF!-*oI@gEl9M|h0J6P}QE4(R
zxLrnb+Wy0bnnuFa6f1^EvH0U9!}JysStwYDFWP3^u%iZ_UbqcYtV&(aT&|@j4m|qx
zn4eiGQR)c|Vxw(ZHfv3j&@O(j?voDstN0^rNuFXSV-$nE>gBpDT_*Kh#J5K@ZIUg_
zHPm3)I@Ol5E{BTls<Hg0!GA<Hf!$&8;FOzf6RVd&`8VcELgi_8NdxnJ`F)xSJO!y@
zr``3u%H-6&YBbS$eCDZ#rwoAD5W9^<3BRZy(lRdL6B@irNEsoM<5e3~dXAWLc+d)0
zjDDNu(dAYm4wGX24%X}}XP#xT;|zzwVY-xzcZ{HX&8U(4yJPi|i8!~#b6#zorALhm
zwlNEmN%>iuG#f>1=ykjt4W6JOxO0Tl=baHer|<$86r8l4?jv3xvntz5va7_PN=W-?
znqE_;acLM%tYvQ`h4a05IC_ygij1mk<Y5YjEW_9}Awr}QGi6=6+^+K#fo7LDGt2b|
zf!I=t({cS4KH#ZJj=>$|*_xi$Q~l*}px19-?lJX>I6pwniFcj7`<SJgCw^^Bsv*Hj
zt?n;f;JHn!q-pJ$zog}$^Q4ZrxuafrI(qJa>s@zWR~G7{Zshas8V&wM#=UZ3O`4iA
z?*8!^{OO$OBVe|AXClZ23j(W2{7lYDYl;Q{&|1opzg|C6HS}Lqe<!?e*+07TTXxI0
c?Eg%<2K{Q%AE3~6U#o!Erh0APfPVe{265uc4*&oF

literal 0
HcmV?d00001