03-27-2023 02:19 PM
We are seeing a lot of events from CORTEX "A Successful login from TOR". Anyone else with this problem?
Seems to be a bug.
03-27-2023 02:21 PM
Yes, registered here just to confirm I'm not the only one
03-27-2023 02:29 PM
We have a Palo Alto partner that told it is a false-positive and the events started when this BIOC was update, but it will be good a confirmation from Palo Alto
03-27-2023 02:30 PM
Seeing the same thing. Started about hour and a half ago. Makes no sense to us. Opened a case with support but haven't been contacted yet. Looks like a BIOC rule issue to me.
03-27-2023 02:38 PM
Looks like it is this BIOC update that has caused the problem. Info on the update here.
03-27-2023 02:41 PM
Same here. No Official answer yet from PaloAlto Support
Thanks for reaching out to LIVEcommunity!
It appears that you guys are aware of an ongoing issue at the moment. It appears a bad BIOC rule went out with a recent Content Update. Our support teams are aware and they are currently working on the issue.
Right now there's nothing you need to do. You don't need to start a support case.
As the situation changes I'll try to make sure that this thread is updated with any new information.
03-27-2023 02:55 PM
Thank you for your answer.
Could you share the Paloalto's official communication in this threat when it's resolved?
Thank you in advance,
03-27-2023 03:36 PM
We had the same issue. 15 alerts from 3:06PM to 4:03PM CST.
03-27-2023 03:52 PM - edited 03-27-2023 03:54 PM
Love getting woken by the NOC for false positives
116 Alerts from 06:09 to 07:23 AEST (UTC+10)
03-27-2023 05:32 PM
We did see this issue today creating continuous alerts for this BIOC rule for almost 2 hours. The community sharing really helped.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!