NTA in XDR

Hi All,

We want to enable this feature on XDR, can someone please guide us with the pre-requisites and what steps need to be followed to enable this feature?

Thanks,

Shahwaz

Help whitelisting a URL that routes through Cloudfront

Hi all, I am having trouble whitelisting a site and wanted to see what I can do about it.  The website I am whitelisting is https://www.pahealthwellness.com/login.html.  When you make some selections on the page, it redirects to https://sso.entrykeyi

DDoS Profiles

How does one go about getting the realistic values for your environment to plug into the DDoS profile or even the zone protection profile? How do you see how many SYNs you are getting per second/min etc?

Citrix Receiver on Globalprotect

I seem to have Globalprotect working fine for access to any internal resource.

The one thing that does not seem to be working is the connection Citrix Receiver (PNAgent legacy version 13.3) makes to our internal Citrix Web Interface / Services site.

I'

Cortex XDR dashboard into Grafana?

Best way to restrict software by digital signer

hey guys, i'm not clear how to block the running (installing) of certain software using XDR by restricting by digital signer. 

Is it possible to cerate a BIOC and apply to a restricted profile? If not, what would you say is the best way to go about th

XQL query search for "Connection Lost" computers

Hi,

I'm trying to find a query which will show me computers with status "Connection Lost".

Sadly I'm not able to do this in both preset = host_inventory  (can't find the computer which has this status in the Cortex Dashboard) as well as dataset =

Issues with pushing out 10.2.9-h1

There is not a community discussion for issues implementing 10.2.9-h1

We have a maintenance window to push out 10.2.9-h1 Thursday evening and with recent issues with 1.2.7.h3 and other roll outs i am starting this thread for the community.

VPN Attempts from Rotating IPs and Generic Usernames

Hello all,

For several weeks, I have been getting many VPN login attempts from different IPs trying to login using generic usernames, like "guest", "support", "admin", etc.

Is this normal? Is there anything that I can do to stop this from happeni

Forensics free trial license expired

Helllo everybody, 

I have a Cortex XDR Pro per GB and I've acquired a "Forensics" free trial license, which expired yesterday. I need to access the results of the forensics, would i be able to do it? or do i need to renew my license?

Awaiting any

Cloud Configuration Report for Auditors

Trying to find a Prisma report that will provide output of snapshots of resource configurations for manual review. The report would enable internal / external assessors to review configurations to manually validate compliance. Existing Prisma complia

How can I see if my FW has already been exploited by the CVE-2024-3400?

Hello team

How can we determine if your device logs match the known indicators of compromise (IoC) for this vulnerability?

I have already fixed the vulnerability and I have the TSF of my device and I want to see if I have been exploited before applyi

CVE-2024-3400 IOC's

Hello All,

Its a twitter link but will try and summarize the process. 

https://twitter.com/cyb3rops/status/1781294529586331650