topic Re: Endpoints without IP and MAC address in Cortex XDR Discussions

Endpoints without IP and MAC address

Shahwaz_Md — Wed, 28 Sep 2022 13:11:58 GMT

Hi,

There are multiple endpoints without IP and MAC address, what could be the possible reason for it?

Thanks

Re: Endpoints without IP and MAC address

mfakhouri — Wed, 28 Sep 2022 14:30:20 GMT

Could you please provide any additional information or context to your issue? Where are you unable to view the endpoints without IP and MAC addresses?

Thanks!

Re: Endpoints without IP and MAC address

Shahwaz_Md — Wed, 28 Sep 2022 14:35:47 GMT

In the All endpoint list

Re: Endpoints without IP and MAC address

neelrohit — Wed, 28 Sep 2022 16:00:18 GMT

Hi @Shahwaz_Md ,

Understand your concern. Assuming that you have Cortex XDR Pro license and you should be able to run query builder, could you try running a query on registry items on all hosts for the last 24 hours and see if there is data which is being populated? Since this could be some backend stuff, we would request you to kindly open a support case and our engineering team should be able to fix it in the backend if that is the required remediation.

Engineering might also request you to send a couple of Tech Support Files from the endpoints, hence kindly provide the same.

Steps mentioned here: https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/investigation-and-response/investigate-endpoints/retrieve-support-logs-from-an-endpoint