Security alerts not updating after being resolved

[PRyncevic]

We have a Panorama managing a VM and a physical firewall

The first has a DG "VM" and the other a DG "Phys". Both the DGs are subordinate to the "shared" DG

AIOPs security alerts were warning to the outbound/inbound high risk IP addresses not being blocked on the DGs "VM" and "Phys"

Two rules have been added to the "shared" DG - one blocking the outbound Palo default EDLs, another one inbound EDLs

The critical security alert for the DG "Phys" cleared, but is still there for "VM", how can this be fixed?

PA/fws on 10.1.8

[aleksandar.astardzhiev]

Hi @PRyncevic ,

If you can confirm that the two rules are inherited by the VM device-groups and not overridden, I would consider this as a bug in AIOps. AIOps is fairly new, especially the integration with Panorama.

[PRyncevic]

Hello,

Yes this is on the firewalls... How would we get assistance  for the bug in this case?

[lir]

Hi @PRyncevic,

Hope you are doing good!

Could you provide a serial number for the device creating this alert?

Also maybe a screenshot of those settings

Kindly send confidential information in private 

Thanks and Regards
Likitha R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*
live.paloaltonetworks.comlive.paloaltonetworks.com
AIOps for NGFW Discussions | Palo Alto Networks
 

[PRyncevic]

Hey Likitha, why am I getting "

You have reached the limit for number of private messages that you can send for now. Please try again later.

" when trying to send a message? the livecommunity is a very frustrating way to get help with AIOPs

[lir]

Hi @PRyncevic,

Could you try sending the message in private and if it is possible can you send me

>>a serial number for the device creating this alert?

>>Also maybe a screenshot of those settings

Thanks and Regards
Likitha R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*
live.paloaltonetworks.comlive.paloaltonetworks.com
AIOps for NGFW Discussions | Palo Alto Networks

[lir]

Hi @PRyncevic.

I wanted to follow up with you to know if you still need any assistance on the issue. Regards,

Thanks and Regards
Likitha R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*
live.paloaltonetworks.comlive.paloaltonetworks.com
AIOps for NGFW Discussions | Palo Alto Networks