- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
10-01-2024 02:18 PM
Hello everyone,
I'm trying to create a gold image in an AWS AppsStream 2.0 environment. I'm following the steps listed here:
When I get to step 2c under "Configure the Cortex XDR Agent in a Non-Persistent VDI" and issue the command listed, the scanning stops at C:\Windows\write.exe and times out. Does anyone have experience with this situation?
Thanks.
10-03-2024 11:14 AM
Hi @J.Isaias
Thank you for reaching out to the Live community!
There could be many reasons for this issue which need a thorough investigation of tech support files to find the exact cause/solution.
There is an article around this issue, please check if this helps - https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sYjrCAE
Additionally, please check the file size where the scan is getting stuck at(C:\Windows\write.exe ) and if the file size is over 100 MB then that could be the cause as well since those files never be uploaded to wildfire for examination and the agent might be waiting for the verdict.
There is an auto mechanism where the agent should ideally skip those files and move on to the next files incase verdict upload/retrieval fails, so I would suggest checking the above initial troubleshooting steps and if that doesn't help please raise a ticket to TAC for further RCA, technical support file investigations and permanent fixes.
Please click Accept as Solution to acknowledge If this answer added value to your question.
Best,
10-04-2024 12:06 PM
L1 Bithead:
Thank you for your advice. It's an excellent idea, but unfortunately, the setting already has the desired value (Wildfire upload is set to enable.) I really appreciate it since your answer made a lot more sense than the ones I was given by the tech support people. Right now, a second level tech is looking into my issue. Last thing we tried was to force a scan of the VDI hoping that the Wildfire would check the files, but still it didn't work.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!