Auto Focus Question - File Hashing

I need to know if AutoFocus can give a file hash field in the log event entery when it sees a file come through.

This file hash will allow us to answer two use cases that we are currently working on, if the file hash is displayed in Splunk, when the

Global Protect Certificate

Hi

I configured global protect, but when clients try to connect through the agent, they got "Gateway "name":The server certificate is invalid, please contact your IT administrator".

For the configured certificates, I configured self-signed certificat

Change Management IPs

Hi

We have Panorama managing 6 PA FWs (3 HA Clusters). We want to change the management net of Panorama and Firewalls.

Now logically we will change management IP of Panorama first. Then the Firewalls will lose connectivity and probably logs will be lo

PA-200 HA Sync

Hi,

I have a message when I attempt to run a commit:

"The running configuration is not currently synchronized to the HA peer, and therefore, this commit will only be applied to the local device.

Please synchronize the peers by going to the dashboard an

FQDN refresh problems

Hell guys,

We have a problem that the FQDN refresh fails nearly everytime. What I mean with "nearly" everytime is, that there are periods in which the FQDN refresh is running smoothly, and then suddenly it fails again.

Example: A few days ago the FQDN

HIP logs to Panorama

I am looking to export HIP logs to Panorama. Firewalls are in Active-Passive mode. Since firewall sync HIP logs in between them I was getting two logs in panorama for each log entry (one from each firewall). Even though I configured active firewall o

8.1.4 CP Normalizing

All of our users who auth over CP are now normalizing as 'domain.com\user' although we need them to be user@domain.com.

The authentication profile they go through has the %USERINPUT%@%USERDOMAIN% modifier.  Domain is filled in & login attribute is 'u

Use MP SSL Session Cache

when i run the below command 

show system setting ssl-decrypt setting

vsys : vsys1
Forward Proxy Ready : yes
Inbound Proxy Ready : no
Disable ssl : no
Disable ssl-decrypt : no
Notify user : no
Proxy for URL : no
Wait for URL : yes
Block revoked Cert : yes
Cer

How to apply advanced filters for O365 API feeds?

Hi,

We would like to retrieve IP addresses from O365, but only for a specific endpoint set (in that instance, endpoint set 56 which is related to O365 authentication (login.microsoft.com etc.), as you can see here: https://docs.microsoft.com/en-us/