While integrating panorama with SIEM server( using Syslog server profile ) for log forwarding from panorama to siem server facing system alert/log on

Slack hooks server certificate invalid

Our firewalls cannot send to hooks.slack.com since they refreshed their cert yesterday (3/14/2023).

I suspect a problem with the way their chain is signing X1 root CA but until they fix it, is there a way to allow the log forwarding service to ignore

Email alerts on any kind of attack, including attempted access to unauthorized websites or data breaches.

Hi all,

i have a requirement of configuring Email Log forwarding, when ever a users tries to access unauthorized websites or resources within our network.

NOTE :

The mail forwarding should have the source IP address, source user, unauthorized website

Freshservice ticket creation with HTTP Log Forwarding

This is the configuration we did to create incidents with HTTP log forwarding and i wanted to share it to see if someone sees it as useful or wants to share an opinion

Syslog connection broken to server Palo Alto every 20 min

Hello,

As per title, I have this problem on a HA scenario with two VM-100 installed on VMware. Practically every 20 min in the system logs  appears:"Syslog connection broken to server". After 0 sec appears:"Syslog connection is established to server".

How to avoid Netflow record for denied traffic

Hi !

we have configured Netflow server and the profile is attached to Inside interface, we are getting Netflow records and it seems working fine. but what we have observed is, we are seeing the Netflows for the traffic which is getting denied by Firew

Cortex Data Lake with Panorama

If you're using Cortex Data Lake with Panorama, does it make more sense to have Panorama in management-only mode, instead of Panorama mode?

Palo Alto Networks App for Splunk - URL Category Logging Issue

There is a flaw in the Palo Alto ‘category’ field reported to Splunk.

• PA began support for multiple categories in 2019.  A given URL can be part of multiple categories.  This was done to support parallel data models. 
• • Legacy model: by industry (educati

SCP log export not exporting whole timeframe

Hi,

I am facing an error during scp log export:

When trying to export with a query, it only exports about 2 or 3 hours of log entries instead of the whole day. I am using the max log count parameter and it is also set on the device. Also it doesn't see

PA Packet Capture

If I needed to take a packet capture of a devices traffic for a week, how would I accomplish that? Enterprise network with PA 5050 on 8.0.12 code version. Not really interested on how to use the packet capture tool itself, I am looking more specifica