topic Security alerts not updating after being resolved in AIOps for NGFW Discussions

Security alerts not updating after being resolved

PRyncevic — Mon, 16 Jan 2023 11:45:27 GMT

We have a Panorama managing a VM and a physical firewall

The first has a DG "VM" and the other a DG "Phys". Both the DGs are subordinate to the "shared" DG

AIOPs security alerts were warning to the outbound/inbound high risk IP addresses not being blocked on the DGs "VM" and "Phys"

Two rules have been added to the "shared" DG - one blocking the outbound Palo default EDLs, another one inbound EDLs

The critical security alert for the DG "Phys" cleared, but is still there for "VM", how can this be fixed?

PA/fws on 10.1.8

Re: Security alerts not updating after being resolved

aleksandar.astardzhiev — Mon, 16 Jan 2023 15:09:53 GMT

Hi @PRyncevic ,

If you can confirm that the two rules are inherited by the VM device-groups and not overridden, I would consider this as a bug in AIOps. AIOps is fairly new, especially the integration with Panorama.

Re: Security alerts not updating after being resolved

PRyncevic — Tue, 17 Jan 2023 19:25:17 GMT

Hello,

Yes this is on the firewalls... How would we get assistance for the bug in this case?

Re: Security alerts not updating after being resolved

lir — Wed, 18 Jan 2023 16:17:28 GMT

Hi @PRyncevic,

Hope you are doing good!

Could you provide a serial number for the device creating this alert?

Also maybe a screenshot of those settings

Kindly send confidential information in private

Thanks and Regards
Likitha R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*
live.paloaltonetworks.comlive.paloaltonetworks.com
AIOps for NGFW Discussions | Palo Alto Networks

Re: Security alerts not updating after being resolved

PRyncevic — Wed, 18 Jan 2023 17:52:29 GMT

Hey Likitha, why am I getting "

" when trying to send a message? the livecommunity is a very frustrating way to get help with AIOPs

Re: Security alerts not updating after being resolved

lir — Thu, 19 Jan 2023 15:38:15 GMT

Hi @PRyncevic,

Could you try sending the message in private and if it is possible can you send me

>>a serial number for the device creating this alert?

>>Also maybe a screenshot of those settings

Re: Security alerts not updating after being resolved

lir — Fri, 20 Jan 2023 15:29:29 GMT

Hi @PRyncevic.

I wanted to follow up with you to know if you still need any assistance on the issue. Regards,