Name: Suspicious Abnormal RPC Request Found (Unique Threat ID: 38713)

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Name: Suspicious Abnormal RPC Request Found (Unique Threat ID: 38713)

L1 Bithead

How can I resolve this kind of alert on our internal network? 

The source is our Manage Switch and the destination is our MPLS. 

The alert source comes from the PAN NGFW.

 

Thank you in advance for your response.

I hope you can help me to strengthen my analysis. 

1 REPLY 1

L5 Sessionator

Hi Ejaspe,

I would suggest collecting a packet capture and open a support case to check if it's False Positive or not.

 

FYI:
How to Submit a Vulnerability Signature False Positive
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClSBCA0

  • 3037 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!