Resolved! Cortex XDR malware scan
Hi,
Does Cortex malware scans e-mails inside Outlook mailbox and if not, is it possible to do this?
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.
Hi,
Does Cortex malware scans e-mails inside Outlook mailbox and if not, is it possible to do this?
Hi team,
I created cluster from scratch and added here 2 brokervm, then for new cluster I assigned dedicated IP address and FQDN, then in local DNS is created A record using ha cluster FQDN and dedicated IP address. Is ti true way? because I tried
...
Hi family ,
I want to update the windows version on some endpoints through command line or powershell script, which i can access by cortex xdr live terminal.
Is it possible?
Cortex XDR
Hi Everyone,
I've been running Powershell scripts on my endpoints from Action Center > Run Endpoint Script > Execute Commands in the XDR interface. It works well, however I need to specify a manual query to target the endpoints I want each time i.e
...
Hi.
Does anyone know if there is a command line to set a proxy to an already installed version of Cortex XDR?
I know the proxy can be set using the command line: Cortex_Installer.msi proxy_list=”<proxy>:<port>”
That being said, I didn’t find any way
...
Hello,
Greetings
Can anyone confirm why does status indicator of Broker VM's Local agent setting keeps fluctuating. It keeps changing between "Connected to Connection Failed" also showing inaccessible URLS that are already whitelisted. Also the a
...
In Win 10 Pro 22H2 19045.3930, Cortex XDR agent unable to uninstall or upgrade in one user pc. Agent setup unable to find in control panel installed applications. Present agent version 8.2.0.46438. Worked on uninstalling from action response, endpoin
...
Hello All-
I am hoping this is a quick question as I did not find this in XDR documentation. It is my understanding that Palo manages a "trusted signers" list. Is there a way to leverage a similar list to automatically block the use/execution of
...
Hello
My Cortex XDR licences expire in a few weeks
I can't find the exact impact, I suppose that the new malware signature won't be updated but :
- Will I be able to handle to connect to the console, to handle the agent
- Will the agent still work?
...
Hello dear community,
is there a way to setup bioc rules only for the scope weekend? I tried a little bit, but couldn't get it done.
Thank you
BR
Rob
Hey dear community,
why isn't it possible to set permanent or temporary exceptions, while user has an scope with tags only on few agents?
BR
Rob
Updating to Agent 8.2.1.47908 is causing Excel wih Add Ons to fail to launch. Wondering if anyone else has experienced this?
Hello,
I have prepared XDR collector agent for Windows. I have installed it on two of my windows servers. But unfortunately, it does not show up on Administration tab where i am supposed to see all installed collectors. I do not see my two XDR colle
...
Hi,
I am having issues with ingesting DHCP log from our DCs. We are using the XDR Collector app. I suspect that the issue is with the filebeat.yml file but cannot figure out what the problem is. I have tried and followed the guide below and copy-pa
...
Hi, I'm trying to configure my TLS enabled Syslog server in Cortex but not successful. I'm always getting "Test failed : Certificate Verification Failed". When I tick the "Ignore certificate errors", the error disappears and one syslog message is rec
...User | Count |
---|---|
3 | |
3 | |
2 | |
1 | |
1 |