Global Protect and Prisma

For Global protect to work, do you need Prisma?

Prisma Access (SCM-managed) – Internal Gateway, Internal Host Detection & DNS behavior

Hello everyone, I’m looking for clarification and best practices regarding Internal Gateway and Internal Host Detection (IHD) in a fully Strata Cloud Manager (SCM)–managed Prisma Access deployment.In the current setup, the endpoint is detected as being on the internal network (GlobalProtect shows “You are on the internal corporate network”), but...

Getting 'Unidentified network' when connected to Global Protect - 6.2.8

Hi Team,There is one user who has windows 11 OSThe user is getting unidentified network after connecting to GP vpnGP version - 6.2.8 -263Does anyone know how to resolve this issue ? and what is causing it ?Thanks & RegardsSania

map incident data

Hello, How can Cortex XSOAR be leveraged to map incident data, playbook actions, and adversary techniques to the MITRE ATT&CK Framework?

Need quote for Firewall PA 440

Need price for firewall PA-440

web file blocking

Hello Community,We are trying to implement file upload/download blocking for W-Web in our environment using a Palo Alto firewall.Current setup:SSL Forward Proxy decryption is enabled.A decryption certificate has been created on the firewall and installed in the Trusted Root Certification Authorities store on client machines.Security policy and F...

Rule for Detection Powershell Execution

I created a BIOC to detect running processes in PowerShell and I intend to exclude some processes to avoid showing too many false positives, such as: SenseIR.exe and CompatTelRunner.exe. Cortex XDR

'Redistribution Agent XXX(vsys1): details: close connection to agent

Dear All, I have installed user-id agent on the server in order to use user-mapping. it was working but it suddenly stopped working. I checked the system log it gives me description contains 'Redistribution Agent XXX(vsys1): details: close connection to agent' I went through the article https://knowledgebase.paloaltonetworks.com/KCSArticleDe...

XSOAR Engineer Exam Experience

Hi Guys, I wanted to ask if anyone here has taken the XSOAR Engineer exam so far. I’m scheduled to sit for it next month and would love to hear about your experience. How practical were the questions? Were playbooks and integrations heavily tested? Any study tips or preparation strategies would be really helpful for everyone in the same boat a...

Want to copy log files in maintenance mode using with scp option. Every time getting failed message while copy. Want to copy log files in local device

How to escape a wildcard (*)

How could you escape a wildcard in a query For example if i am looking for suspicious LDAP queries like (objectclass=*), i need that to be literal and not match on things like objectclass=example. I have tried many different combinations including just a simple \* but have not found anything that works

Palo alto type of license subscription

Hi, May i know type of security subscription license module. How we can define the requirement for inside office and outside network traffics. Thanks

HA GlobalProtect firewalls in Azure

I would like to deploy GP firewalls in Azure, I would like to configure 2 firewalls which are working active-active to have always some protection if one availability zone will have maintenance always second fw will handle the traffic. I was think to have 2 portals and 2 gateways, on 2 different Public IP which will be resolved on one DNS name. ...

Result empty after using json2html script

I found the issue after using script json2html table to convert json array to HTML table. it's return to empty vaule. Do you have any idea?