AIOps for NGFW Discussions
This forum is to ask questions, provide answers, and troubleshoot queries related to Palo Alto Networks’ AIOps for NGFW, the industry’s first AIOps solution for Next-Generation Firewalls.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
AIOps for NGFW Discussions
This forum is to ask questions, provide answers, and troubleshoot queries related to Palo Alto Networks’ AIOps for NGFW, the industry’s first AIOps solution for Next-Generation Firewalls.
About AIOps for NGFW Discussions
This forum is to ask questions, provide answers, and troubleshoot queries related to Palo Alto Networks’ AIOps for NGFW, the industry’s first AIOps solution for Next-Generation Firewalls.

Discussions

Security alerts not updating after being resolved

We have a Panorama managing a VM and a physical firewall The first has a DG "VM" and the other a DG "Phys". Both the DGs are subordinate to the "shared" DG AIOPs security alerts were warning to the outbound/inbound high risk IP addresses not being blocked on the DGs "VM" and "Phys" Two rules have been added to the "shared" DG - one blockin...

Resolved! AiOPS Alert Management - disable alerts for specific profiles/configuration

We've enabled AiOPS and while it does do a great job in putting together a lot of data and also BPA recommendations. We do have some questions in regards to alerts. We have specific Vulnerability, Spyware and so on profiles. Some are explicitly as ALERT-ONLY, or for E-Mail SPAM-GATEWAYS where we only want ALERT for SMTP decoder since our MTA is ...

AlexNC by L3 Networker
  • 5077 Views
  • 4 replies
  • 0 Likes

Aiops

Since Panorama manages our firewalls and already receives all logs, will turning on "AIOPS" simply for Panorama and not for each individual firewall be sufficient?Does the portal display the health condition of each firewall and Panorama with the aforementioned setup? Does "AIOPS" need to be enabled on each firewall in addition to Panorama in ...

AIOps for NGFW with multiple instances

Hi guys. When activated the AIOps for my customer, it created two instances and from the 44 firewalls I have the my environment, 5 of them are in one instance and the other 39 in the other instance. Is there a way to move them from instances or remove from one, delete the instance and them re-add to the preferred instance? BTW, we're using the f...

Resolved! Change AIOps tenancy location

Hi, I've found out that more European locations have been added as options for AIOps locations. Please can you tell me how to change the AIOps tenant to be pointed towards Netherlands? I already asked this question to PAN customer support, and they directed me here. Thanks

AIOps missing Activate button

I was trying to use AIOps (free or trial), but I don't have the 'Activate' button shown in the HUB.Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.

Razvaan by L0 Member
  • 5406 Views
  • 7 replies
  • 0 Likes

AIOps (free) Not showing data. CDL instance shows 'Unvailable'

AIOps debug capture ID -- 35j0QuYOQBKT271tbTUvPgCortex Data Lake debug capture ID -- r4Ed7TwJQjSxaICy5rd7nQ Data not showing in AIOps dashboard after following steps in documentation to onboard devices. This includes adding the AIOps plugin to panorama (version 1.1.0). Device certificates are valid. Panorama on version 10.2.3 and managed firewal...

There is a problem with your entitlements, please contact hub team

I am trying to setup AIOps (free edition) and I'm stuck. My devices are talking to the cloud becuase I see them in my AIOPs dashboard, but I'm not getting any other kind of data. In the hub, the only two apps I have are AIOPs and Explore. When I click the Explore button, I get the following message: There is a problem with your entitlements...

AIops

Hi, I activated AIops yesterday on one of Firewalls. However, 'AIOps for NGFW' under Manage Apps in the Hub still shows the egg timer. It has been over 24 hours since activating. FW is running OS 10.2.3 and is a PA-5220. I was wondering if this delay was normal? Please advise.

Filtering by device group

We run a multi-tenant panorama and have several unrelated accounts reporting alerts Could we request a feature to be added for filtering different device groups (currently called "Locations") so that only the selected device groups can be shown? Ideally a global filter so not just security group alerts but also application and threat data

Frequently encountered problems in Onboarding AIOps

Problems with activating the Free tier of AIOps? In general, it is due to something trivial that has been overlooked. Based on our beta program, these were the top 3 reasons customers usually had issues in standing up an instance of the Free tier of AIOps. 1. During AIOps activation flow, there is no CDL tenant in the drop-down list to point t...

  • 114 Posts
  • 58 Subscriptions