Discussions
Check out LIVEcommunity discussions to find answers, get support, and share knowledge related to Palo Alto Networks tools and products.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Discussions
Check out LIVEcommunity discussions to find answers, get support, and share knowledge related to Palo Alto Networks tools and products.

Browse the Community

General Topics

Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

23573 Posts

Custom Signatures

The Custom Signatures discussion is a resource for security professionals to discuss the creation process of custom signatures in their PAN-OS appliance.

163 Posts

VirusTotal

Have you encountered a false positive verdict for Palo Alto Networks (Known Signatures) on VirusTotal? Use this forum to submit a verdict change request. Change requests should include the File Hash, Link to VirusTotal report, current VirusTotal verdict, and description.

727 Posts

Network Security

Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to all things Network Security.

4446 Posts

Cloud Delivered Security Services

Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to Palo Alto Networks’ Cloud Delivered Security Services.

572 Posts

Secure Access Service Edge

Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to Prisma Access and Prisma SD-WAN.

419 Posts

Cloud Native Application Protection

Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to Prisma Cloud and Cloud Identity Engine discussions.

441 Posts

Security Operations

Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to Cortex XDR, XSOAR, and Xpanse discussions.

3102 Posts

Activity in Discussions

How to add device in AiOps?

Hi Team,

 

Good day!

 

How to add devices properly in AiOps?

 

I have this client which he says no report is being seen for telemetry and data.

 

May I kindly ask how to do this properly?

 

Regards,

Renz

CVE ID

Device details : PAN-PA-5060 / Palo Alto

There are 6 CVEs in the advisory.

DESCRIPTION:

CVE-2024-9463: CVSS: 9.9
CVE-2024-9464: CVSS: 9.3
CVE-2024-9465: CVSS: 9.2
CVE-2024-9466: CVSS: 8.2
CVE-2024-9467: CVSS: 7.0
CVE-2024-9468: CVSS : 8.2

 

 

 

Kindly con

...

XQL query for incident report

I like to get a hint how i can build simple xql query for  overtime timeframe for incidents. I need to filter that data, but that kind report that i can show example monthly base report for customer. where there are data for each day

T.Nurmi by L0 Member
  • 76 Views
  • 1 replies
  • 0 Likes

Alerts and incidents

Hello Palo Live Community.
Does anyone know what are the criteria that Cortex XDR takes into account to create an incident for a single alert? This is because I have seen that some alerts do not necessarily form an incident, but in other cases, yes. I

...

R.Tuyub by L0 Member
  • 51 Views
  • 0 replies
  • 0 Likes

GlobalProtect

I have a user that when they try to logon to GlobalProtect they get the logon screen minimized, but if you try to maximize it nothing happens. So they are unable to enter their email address and password.

Screenprint attached

Prisam cloud

Hi,
   I am new to prisma cloud,
     1. I can able to view ec2 instances but i cannot list the s3 buckets
     2. When i try to integration with s3 with prisma cloud , test failed.

 

balasuriyas_0-1728542185426.png

Azure AD and InTune

Hi Palo Live Community, I'm hoping that someone has worked with Cortex XDR and Azure InTune.

 

I'm trying to find a dynamic way to apply an extension profile  (block USB), in Cortex XDR, targeting specific endpoints that reside in Azure InTune.

 

Bef

...

GlobalProtect expand IP Pool

We have an existing GP setup and it's working, but the IP Pool is set to a range of IPs 192.168.10.10-192.168.10.100 instead of a subnet 192.168.10.0/24.

 

I want to either expand the range or change it to a subnet.

 

I tested this by expanding the r

...

Failed to establish GRPC connection to AceMlc2 service: failed to start grpc connection with address ace.eu.hawkeye.services-edge.paloaltonetworks.com

Getting below alert from the hardware firewall.

 

"Failed to establish GRPC connection to AceMlc2 service: failed to start grpc connection with address ace.eu.hawkeye.services-edge.paloaltonetworks.com:443"

 

Followed the below document but no luck.

...

CyberEye by L3 Networker
  • 2946 Views
  • 4 replies
  • 0 Likes

Do PAN TAC even read the content of the ticket?

This has happened more time than I can count, and I have Platnium support.

 

I work in the US Eastern time zone 8am-5pm ET and every time when I open ticket with PAN support, I always put in this line at the beginning of the ticket:  "I would like to

...

dtran by L4 Transporter
  • 1182 Views
  • 5 replies
  • 0 Likes

show routing route destination output

Hi all,

there is something which is confusing me when I want to check an entry of the routing table.

If I'm looking for an entry of my routing table with:"show routing route destination x.x.x.x/x" and the route is covered by the default route, the outp

...

muellerm by Not applicable
  • 10513 Views
  • 6 replies
  • 0 Likes