Traffic logs doesnot have a corresponding URL log

I am trying to perform some forensics into a user activty but Palo Alto logs are not really helping me a lot. I mean, I see a traffic for some IPs but when I click the maginifying glass icon, I see the category in it but not the actual URl. I have ch

helps generate an XQL to notify when a USB is connected

I am trying to use Cortex XDR so that when a user connects a USB storage device I receive a notification by email.

so far I have used this XQL:

preset = device_control
| filter event_sub_type = ENUM.DEVICE_PLUG

which tells me when any USB device

Difficulty getting help Tried contacting administrative help for palo alto, was rereferred to TD Synnex, no solution, hung up on by palo alto next...

Add OSPF Route Tags

Hi,

I need to amend my routemap redistribution filter to set a tag to the routes in my referenced prefix list.

My question is, when doing this on a live firewall, will this require OSPF to re-converge?

Thanks

Defining patch management in HIP objects.

Hi All,

We are configuring global protect with HIP enabled.

Our requirement is, If the patch defined in the HIP object is missing in client machine then access should be denied. Below screen shows the patches (windows updates) for windows 7 machine.

Fro

Out of memory: Kill process xxxx (mgmtsrvr) score xx or sacrifice child

This is a recurring issue, a reboot helps for time being.

When attempting to update to the latest antivirus version, we see that the commit fails.

System resources look normal.

And looking at the techsupport file in /var/log/messages, we see that d

Advanced DNS Security vs. DNS Security

Good day,

i apologize in advance if i'm posting in the wrong place...

i've read the docs but i have some clarifications:

1. What exactly can Advanced DNS Security do that DNS Security cannot?  It's implied that plain DNS Security cannot detect mi

Palo alto PA3060 high memory usage over 60%

Hi everyone,

In our performance report, it is find some Palo Alto PA3060 firewall memory usage keep high than > 60%, which trigger resource alarm refer our monitoring standard.

I tried action like reboot device but memory level remain more or less

Global Protect - SAML Authentication Complete Page

We're testing upgrading to version 2.5.x and have run into a few changes with the new features.

We enabled "Use Default Browser for SAML Authentication", because you know ie, is going away.  After doing this, each time our end user authenticates, the