Fast boot PA-450

I have a firewall that for some reason after doing a version update to 11.1 is only taking 2 to 3 min to boot now. I noticed all the logs were not showing up and the interfaces was showing down, but everything was working. I decided to do a factory r

Best Way to block IP address from access Palo Alto VPN

I setup a small PA 440 firewall with GP VPN for my church. I am seeing a specific IP address constantly attempting to gain access via VPN using different login names, and wanted to reach out for the best methods to block vpn access for the offending

Does demisto xsoar support automatically assign tickets to analyst based on a list

Need help

We have several analysts on schedule to perform ticket review bi-weekly.

I have used a demisto xsoar job to generate a ticket review ticket every 2 weeks.

However, how do i assign this ticket to the analyst automatically based on the shif

Tips & Tricks: Allow or Block YouTube Video

Tips and Tricks: Allow 1 YouTube video and block others

Read about how you can allow certain YouTube videos but block others through Palo Alto Networks devices and software. We reveal some excellent tips and tricks to help you apply this category to

Cisco ACI-Plugin for Panorma: IP Subnet of BridgeDomain not being synced

Dear Guys

we have a Cisco ACI in place that polcy redirects all traffic to our Palo DC firewall.

For creating policies we rely on the Cisco ACI Plugin to sync endpoint information (IPs, Subnets, etc.) from ACI.

The issue: The "bridge domain" elemen

Eve-NG Palo Alto VM ARP Issue

Does anybody encounter arp problems in eve-ng on palo firewall with pan-os 11 version ?  As an example, i have a small topology like clientA->routerA-> firewall<-routerB<-clientB , when i try to ping from clientA to clientB, clientA send ARP Request

Help me to fix this issues /possible solution

 I am going to configure  Palo alto 5250 firewall to   branch   Huawei router  

The device is not physically connected ,  i try to  do static route from Palo alto to  Huawei router router but the network is not reachable.

kindly support me how to f

Creating a Queue on Slack Integration

Hello all, 

I am working with Slack from the playbook level where a message summarizing an incident is sent followed by Slackask automation to ask users on a channel to confirm the information with two interactive buttons. Take note that the flow has

Creating a ServiceNow incident by taking the Slack user responses

Hi All,

We have a requirement to create a ServiceNow ticket by taking the slack user responses.

I have built a playbook which does send the SlackBlockBuilder to the specified Slack channel but the playbook runs only when an incident is attached to it

Understanding Prisma Access Syslog Header & messages

Hello Team,

I am working on Prisma Access syslog csv format. We are able to forward & receive csv logs successfully.

Now, I am trying to understand the format. I could able to understand the message part as all the field details are provided in the P

Traffic Flow on AWS

Hello Everyone,

Firstly let me give you the brief about our requirement, which is as follow:-

1. We are using 2 pairs of VM-Series NGFW.

2. We want to route inbound & outbound traffic via this 2 pairs of VM-Series NGFW.

3. For inbound traffic we

Pulling updated hash values of unwanted softwares from unit 42.

Hi Everyone,

Is there any possibility within Cortex XSOAR to pull updated hash values of unwanted software from unit42?

Scenario: If we have a list of hash values of unwanted software (like Team viewer for eg) and we enrich the hash indicators us

Detect and Restrict Powershell cmdlets

Hello everyone,

I would like to know if any of you have struggled with support and technical cases with the need I show below.

I would like to know what you can tell me or give me your opinion about taking action against powershell cmdlets.

After sev