topic Re: Not receiving a Zone Protection Profile Threshold Recommendation from AIOps in AIOps for NGFW Discussions

Not receiving a Zone Protection Profile Threshold Recommendation from AIOps

NavyTech — Fri, 14 Jul 2023 17:21:07 GMT

I'm trying to use AIOps to get a suggested DoS protection baseline. The first method suggested by this guide is to use Zone Protection profile Threshold Recommendation alerts from the AIOps.

I have two Palos that have been sending telemetry data for AIOps for 3 weeks now, but so far this alert has not been generated. Does anyone have any experience using this alert from AIOps?

I found a single help article about it. The tags in the article hint that it may be a 10.2 feature, and I'm using 10.1. But those are just article tags, not anything specified in the article itself.

Re: Not receiving a Zone Protection Profile Threshold Recommendation from AIOps

ozheng — Sun, 23 Jul 2023 11:29:29 GMT

Hello @NavyTech ,

Are you using AIOps-Free or AIOps-Premium?

Maybe the thresholds are part of AIOps-Free.
(the AIOps plugin for Panorama is to use with AIOps-Premium)

Re: Not receiving a Zone Protection Profile Threshold Recommendation from AIOps

NavyTech — Mon, 24 Jul 2023 12:59:16 GMT

I am using AIOps-free. I have a PA-5250 and PA-450 reporting to it, both on 10.1.9 versions. Not using Panorama.

Re: Not receiving a Zone Protection Profile Threshold Recommendation from AIOps

ozheng — Wed, 26 Jul 2023 14:41:12 GMT

Probably part of Premium feature.

Re: Not receiving a Zone Protection Profile Threshold Recommendation from AIOps

svenkatarama — Wed, 26 Jul 2023 15:24:07 GMT

The ZPP-related Alerts are in Premium AIOps.

BTW, here's the link to the AIOps Alerts reference page- https://docs.paloaltonetworks.com/ngfw/incidents-and-alerts/alerts-reference

Re: Not receiving a Zone Protection Profile Threshold Recommendation from AIOps

NavyTech — Wed, 26 Jul 2023 15:39:26 GMT

Bah, that's what it is. Thanks for the help.