General Topics

Resolved! Apple SoftwareUpdate.exe got blocked by Cortex XDR

Hello Palo Community,

does anybody know why the Apple SoftwareUpdate.exe got blocked by Cortex XDR today

Or has someone else also encountered this Problem?

In the Community section of VirusTotal I discoverd a comment that Palo Alto apperently changed

...

Resolved! Daily URL Filtering Report within a time frame

Hello,

I am trying to produce a report for our head of school accommodation that shows the URL filtering of his borders after a set time each day.

Producing the list in the URL filtering tab on the Palo Alto and downloading in CSV format is straightf

...

Does static route path monitoring work with multiple virtual routers ?

Hello,

I need to implement a static route monitoring where route A with metric 5 is only applied if google is reachable, route B with metric 10 is backup link through WAN, and both routes are on VR default. I have another VR, Apps VR, where I need to

...

XFF IP does not show the source IPs on the monitor

Hello Guys,

The X-Forwarded-For Headers option has already been enabled and it has been set to Enabled for security policy, but the information is not visible.

Something else has to be enabled in the device configuration or in the load balancer?

I foll

...

Resolved! User-ID Agent: wildcard support in ignore_user_list.txt

A customer of mine uses a mix of prefixes and suffixes for service and privileged accounts respectively, and needs to ignore these accounts to prevent incorrect mappings. This is especially true where policy applies to non-privileged groups, if a non

...

How do you setup FS-ISAC STIX/TAXII feeds to minemeld?

I was following this thread here:

https://live.paloaltonetworks.com/t5/minemeld-discussions/fs-isac-new-stix-taxii-feeds/td-p/334068

But nobody responded to my question so I'm starting a new thread hopefully to gain some visibility. We've upped ou

...

Auto Assistance

Hi，Guys

Is there any documents about Auto Assistance ？

I am working at local partner ，just want to learn more about it .

Return traffic log

Is it possible to view return traffic logs in PA. I am running a PBF for HTTP and HTTPS only, it goes through a diff interface.

Sites or apps with custom ports (not 80 or 443) not working.

I am trying to find the return traffic interface while PBF is

...

After migration to Palo, seeing Exchange ActiveSync event ID 1040

We migrated from a Cisco ASA platform this weekend to PA-3220 Active/Standby pair on Panos 10.0.8-h8.

We worked through minor issues during the process but had the network fully operational in about 3 hours.

One thing I notice since the conversion i

...

Block UDP 443 outbound

Need some assistance creating a security rule to block UDP 443 outbound on my PA-3250 firewall.

Resolved! Migration of Panorama configuration

I need to migrate the configuration of a Panorama X to another Panorama Y where I need to split several devices on their own panorama (Y). The plan according to several discussions is to export the config of current panorama X, import into Panorama Y

...

Can a corporate network print to a remote client's printer (Remote User-to-Site VPN)?

I've connected my client pc to my corporate network via Global Protect, and my computer is able to access the resources on my corporate network side. I need to know if there's a way that my corporate network can send a print job to my client computer

...

Resolved! cli command to check dos attack

we have not implemented the dos or zone protection.

Is there any cli command i can use to check the dos attack?

i know below for now

show counter global | match dos

> debug dataplane show dos classification-table

> show counter global filter aspect dos

>

...

Zone capacity

Hello

We have PA 3060 device on 8.1 code, I know its current capacity is 40 zones. If I upgrade to 9.1 will that capacity for the zone increase?

Thanks

-Amin

Resolved! Custom URL Category Configuration Verification.

Is anyone able to confirm this for me by chance? I'm trying to do some testing, but being able to find independent confirmation would be a nice comfort to me.

In a Custom URL category list, is an entry like:

abc.com/

equivalent to:

abc.com/*

?

Thanks!

Th

...

Discussions

Resolved! Apple SoftwareUpdate.exe got blocked by Cortex XDR

Resolved! Daily URL Filtering Report within a time frame

Does static route path monitoring work with multiple virtual routers ?

XFF IP does not show the source IPs on the monitor

Resolved! User-ID Agent: wildcard support in ignore_user_list.txt

How do you setup FS-ISAC STIX/TAXII feeds to minemeld?

Auto Assistance

Return traffic log

After migration to Palo, seeing Exchange ActiveSync event ID 1040

Block UDP 443 outbound

Resolved! Migration of Panorama configuration

Can a corporate network print to a remote client's printer (Remote User-to-Site VPN)?

Resolved! cli command to check dos attack

Zone capacity

Resolved! Custom URL Category Configuration Verification.

How could i drop"unknown RADIUS authentication protocol"?

Monitoring Palo DB cloud service

Where does it show which Agent Config applied to a specific users' Global Protect session

Howto delete sub-interace from cli

Zoom phone custom signature thru: ssl-req-chello-sni

Palo Alto's stance on CVE-2024-3661

Re: Sofware Upgrade broken? "An active license is required for this feature"

Fuel Spark Event Discussion: AI in the Age of Cybersecurity (May 23, 2024)

Re: Where does it show which Agent Config applied to a specific users' Global Protect session

Re: High availability Links on different locations

Unlock your full community experience!

Resolved! Apple SoftwareUpdate.exe got blocked by Cortex XDR

Resolved! Daily URL Filtering Report within a time frame

Resolved! User-ID Agent: wildcard support in ignore_user_list.txt

Resolved! Migration of Panorama configuration

Resolved! cli command to check dos attack

Resolved! Custom URL Category Configuration Verification.