Creating a Queue on Slack Integration

Hello all, 

I am working with Slack from the playbook level where a message summarizing an incident is sent followed by Slackask automation to ask users on a channel to confirm the information with two interactive buttons. Take note that the flow has

Creating a ServiceNow incident by taking the Slack user responses

Hi All,

We have a requirement to create a ServiceNow ticket by taking the slack user responses.

I have built a playbook which does send the SlackBlockBuilder to the specified Slack channel but the playbook runs only when an incident is attached to it

Understanding Prisma Access Syslog Header & messages

Hello Team,

I am working on Prisma Access syslog csv format. We are able to forward & receive csv logs successfully.

Now, I am trying to understand the format. I could able to understand the message part as all the field details are provided in the P

Traffic Flow on AWS

Hello Everyone,

Firstly let me give you the brief about our requirement, which is as follow:-

1. We are using 2 pairs of VM-Series NGFW.

2. We want to route inbound & outbound traffic via this 2 pairs of VM-Series NGFW.

3. For inbound traffic we

Pulling updated hash values of unwanted softwares from unit 42.

Hi Everyone,

Is there any possibility within Cortex XSOAR to pull updated hash values of unwanted software from unit42?

Scenario: If we have a list of hash values of unwanted software (like Team viewer for eg) and we enrich the hash indicators us

Detect and Restrict Powershell cmdlets

Hello everyone,

I would like to know if any of you have struggled with support and technical cases with the need I show below.

I would like to know what you can tell me or give me your opinion about taking action against powershell cmdlets.

After sev

On-write Protection is disabled by default

Hi everyone, 

Just wondering how's the performance or resource is impacted when this protection is on, i bet it would have certain impact as this is "Disabled" by default. or any other concerns if ON?

Any experience to share?

thanks 

Panorama M500 to M700 Migration with Prisma Access

Hi all,

We are planning to perform a Panorama M500 to M700 migration with Prisma Access VPN Users integrated in. What would be the best steps to do to achieve minimum downtime for the VPN Users.

For context, we are to migrate Prisma Access & CDL

Standby firewall restarting on 11.0.4-h1

Upgraded my 5250 firewall pair last week to 11.0.4-h1 for CVE-2024-3400.  Since then, have seen my secondary/standby firewall reboot twice over the course of a week after a error of "HA Group 52: Dataplane is down: too many children exited".  This ne

GlobalProtect MacOs Connection

Hello,

I am a PA-440 user, current globalprotect version is 6.2.3.
When I try to connect to vpn via macos I get the following error (Could not connect to the
GlobalProtect service. Make sure the Global Protect service is running.
If the issue persists,

Cloud Identity Engine - Multi Auth Profile

Hello All . 

Have a very simple thing I am trying to do but as ever things are not so simple with Palo . 

I'm using Prisma SASE  and this focus around this question is Cloud ID Engine & Global Protect. 

WE are AAD only with no on premise resources

Should we block HTTP range requests?

I have found a few short discussions about how to block range requests, and an article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClJsCAK.

My question is whether we should be blocking them because they present a thre

Global Protect - ARM client

As stated with this link, a client version of GlobalProtect for ARM has been released

GlobalProtect fails to connect on windows 11 ARM64 with error message: Could not connect to the GlobalProtect service.

As I migrated to a new machine (ARM process

Error Encountered Bringing Up PaloAlto VM in ESXi (6.5)