Resolved! CORTEX XDR Cloud Inventory AWS Region TEL AVIV is fully supported?

Cloud Inventory in Cortex XDR is not detecting our assets in the AWS Tel Aviv region,

while it does detect assets in other regions, even though the configuration and permissions are valid according to Cortex XDR SaaS.

Is this a bug, a limitation, or

Resolved! How endpoint devices, XDR Broker VM and XSIAM Cloud communicate in case of HA configuration

Hi Team,

I'd like to know how endpoint devices, XDR Broker VM and XSIAM Cloud communicate in case of HA configuration.

I guess HA configuration may require a virtual IP address to receive logs from endpoint devices and to send the logs to XSIAM C

Resolved! Threat ID #9999' generated by PAN NGFW

Hello,

I have turned off alerts on NGFW for Private URL, but I still get threat ID #9999. 

Can somebody a little bit more explain what this threat ID means? I am trying to clean it up, but still get these alerts.

And it is not any kind of malicious tr

Resolved! Cortex not allowing specific Bluetooth devices to connect

We have been testing device blocking using Cortex. We have noticed that some Bluetooth devices (Apple Air Pods for instance) are not being allowed to connect/pair. I do not see a setting specifically for these types of devices, and I have been unsucc

Resolved! Baseline Creation of Endpoints Without Registered Alerts in Cortex XDR

Good afternoon, it’s a pleasure.

I’m currently working on building a baseline of endpoints that have not generated any alerts within the production timeframe. The idea is to use this baseline as the foundation for a future correlation rule.

I’ve been

Resolved! Block Execution of Specific Applications Regardless of Location

I want to prevent the execution of anydesk.exe, choco.exe, and cloudflared.exe. However, I went to the Prevention Policy Rules and created restrictions for applications, but it only allows blocking in specific locations, so that doesn't meet my needs

Resolved! XQL query to get the list of new software/applications

Looking for help. I would like to come up with the query to find all new applications installed compare to the last month inventory. 

The logic would be what new application/software have been installed on the hosts this month.