VSCode Very Slow with Cortex XDR installed

Hey all,

We deployed Cortex XDR a few months ago and since then our developers have been very frustrated with the performance of VSCode. 

When VSCode is launched the Cortex XDR Service on the system spikes heavily with CPU usage, and VSCode takes

Child(?) Broker VM Setup

We are a semi-isolated environment with no internet connectivity, and have a customer requirement of having minimal network traffic between our environment and one with internet connectivity.

We are looking at implementing Cortex XDR on our environ

Decryption: List of App-IDs that require decryption

This is a re-post of an earlier post of mine that has been buried, but this time with a little more context.

Is there already a central location where all app-ids that require decryption to use/discover are listed? It's called out in the content re

Where can I find more information about pan 279746?

Hello,

I have a PA-450, and I would like to know if there's any additional information about this, other than what's provided in the software release notes

APP ID

Hello Techie,

I've one generic query related to aap id feature, one of the PA docs says it requires 4packets or 2000bytes to identify any single applications where in live scenerio I do see see it works with only 1 single layer 7 packet(C2S/S2C) ca

How can I only use Prisma Access Browser and not other browsers after Prisma Access GlobalProtect is connected?

How can I only use Prisma Access Browser and not other browsers after Prisma Access GlobalProtect is connected?

Firewalls in Active Active using Azure Internal Load balancer

Hi, we have deployed Palo-alto firewalls on Azure and a Standard Internal Load Balancer with single front-end IP and single backend pool, does LB maintain session state if -

(1) communication is sourced from Azure VNET destined to On-premise ?

(2) co

Prisma Access Browser_How to enforce the use of PAB and block connections from other browsers?

Hello all,

Is it possible to enforce the use of PAB and block connections from other browsers?

The inability to restrict access to only PAB allows other browsers to connect, introducing a potential security vulnerability.

cortex xdr custom xql query to view server operational status

A question about ECMP

Hi，

    I saw a function named ecmp on palo alto NGFW, I think that it can make outbound traffic load balance on two or more physics line or logic line. And I also saw there was a inbound interface information in the session table of firewall.

   So

Prisma Cloud Support EKS version

For Document, the EKS version information supported by Prisma SaaS version is as follows.
=> EKS 1.29 ~ 1.32

Among the targets we are currently installing, 1.28 is also in use without any specifics.

There are some versions of EKS 1.25 and 1.27 among t

GlobalProtect setup on Azure Palo Alto VM - No access to servers

Hi,

I have a Azure Palo Alto VM setup with GlobalProtect access.

I can successfully connect via GlobalProtect and connect to all resources on sites connected via IPSec Tunnels. However, I am not able to access anything on the local segment in Azure. 

3 Ways ADEM Uses Out-of-the-Box Intelligence to Detect Application Performance Issues

2 min read

In a world where digital experience shapes our daily lives, how can businesses ensure a consistent experience across a distributed workforce using countless applications from any device? 

Consider the Slack app outage on Feb 26, 2025 or the Wo

VPN issues with 3 ISPs

After upgrading to the pa-850 10.2.13-H3 version, problems started occurring in one of the ISPs. There are 3 ISPs, the first two main ones and the third one as a secondary ISP which manages the VPNS. After the upgrade the configuration was maintained