About jforsythe

LIVEcommunity’s Cyber Elite Program   LIVEcommunity’s Cyber Elite Program is a way to recognize experts in our community from around the globe who have demonstrated excellence in their contribution and exemplify LIVEcommunity values. Members of our Cyber Elite program are chosen on a yearly basis. These experts are generous in sharing their cybersecurity, IT, and product knowledge with other members, and pillars in our community.    You can tell that a member is a Cyber Elite if they have the orange Cyber Elite trophy badge, pictured below, next to their username.       Cyber Elite experts’ knowledge helps others protect their companies and customers—and we hope you’re able to leverage their expertise and participation in the community. Meet the current cohort and read more about the Cyber Elite Program.     UP NEXT — Step 9: How to Report Inappropriate Content on LIVEcommunity     ← Return to the Welcome Guide ... View more

Subscriptions and notifications are critical components for interacting with the community. Here’s a primer on how to make them work for you.   Subscriptions  Subscribing to an area is an easy way to stay up-to-date on the happenings on that area in LIVEcommunity.    If a page or area is of interest to you, you can subscribe to them to receive notifications—by email or in the community or both—when a new blog or article is posted to the area or a comment or reply is made.   To subscribe to an area, blog, or article, expand the “Options” dropdown in the upper righthand corner and click Subscribe from the dropdown.   We recommend you start by subscribing to the landing page for the product you use. Or, if you’re more interested in general happenings and information, you can start by subscribing to the LIVEcommunity Blog and LIVEcommunity Discussions areas.     Managing Notifications for Subscribed Activities You can change your email notifications by selecting My Subscriptions under your username in the top-right corner; from here, you can edit your subscriptions, delete all subscriptions, and sign up for or deselect email notifications.    You can further customize your notification settings under the notification settings tab, which allows you to edit the frequency and circumstance for push, mobile, and email notifications.      UP NEXT — Step 8: How to Leverage LIVEcommunity's Cyber Elite Experts   ← Return to the Welcome Guide   ... View more

How to Recognize an Accepted Solution   Replies to discussions can be validated as an Accepted Solution by certain community members. LIVEcommunity's Accepted Solution feature adds visibility to discussions that have been solved, and helps you identify problem-solving information fast.    Solutions can be verified—aka accepted—by the author of the discussions, Cyber Elite experts, LIVEcommunity team members, and other Palo Alto Networks employees.    Community-Expert verified PAN-expert verified You can tell what type of community member created the Accepted Solution by what icon appears next to it (look right for the two icons →).   Accepted Solutions help build knowledge in the LIVEcommunity and help members find answers fast.      Look for the Green Checkmark   Discussions with Accepted Solutions have a green checkmark to the left of their title, as shown below:          If you enter the discussion you can immediately go to the accepted solution by clicking the "Go to Solution" link.  This is especially useful if the discussion has many replies and multiple pages.         We hope this feature gives you confidence to apply the recommended solution if you're having the same issue.       UP NEXT — Step 7: How to Manage Your Subscriptions and Email Notifications   ← Return to the Welcome Guide   ... View more

Are you ready to become a conversation starter? If you have searched for an answer, topic, or query and have not found what you’re looking for, then your next step might be to post a discussion. There are many ways to post a message to the discussion areas on the LIVEcommunity. Let’s go through them together.    Posting a Discussion from the Homepage   You can start a conversation from the main LIVEcommunity page by clicking the "Start a conversation" button.   Please be sure to select a discussion area that matches what you would like to post this new discussion to, as there are many discussion areas in the LIVEcommunity.       Starting a Discussion in a Board    Another way is to start a conversation is to go directly to the board where you want to post. You can do this under Collaboration > Discussion. You will see there is everything from General Topics to more than a dozen technologies and tools.   Once inside the area you need, Click the Start a conversation button at the top of the page. In the Subject field, enter your message title. Tip: Make your subject clear and concise, as it is the only part of the message that shows up on the message-listing page. In the Body field, type your message. Be sure to include all necessary details, especially, for technical topics. Format and spell check your message, as needed. You even have an area to drag and drop any files that may help others answer your questions. Click Post to post your topic or Cancel to abandon the new message.   Note: By default, the "Email me when someone replies" option is selected. If you do not want to be notified about any responses, you have to uncheck this option in the upper part of the window.   How to Reply to a Discussion   While inside of a post, simply click the Reply button to respond to a particular post. You are now part of the conversation—kudos!   UP NEXT — Step 6: The Importance of Accepted Solutions   ← Return to the Welcome Guide   ... View more

Additional Palo Alto Networks Resources   Resources are always important to help learn and solve questions and issues, so we expanded our resources to now include links to the following external areas:   Beacon: This area is where you can learn and expand your knowledge of all Palo Alto Networks solutions. Everything from instructor-led training to certifications. Knowledge Base: Our Knowledge Base has been expanded and improved. From newer and updated documents to translation options available for every article. Support Portal (CSP): The Customer Support Portal helps you to manage your devices, gain access to support, access the Best Practice Assessment tool, and utilize many other resources available to customers. TechDocs: This is the main Technical Documentation page that holds an abundance of great admin guides, white papers, release notes, and much more. Cyberpedia: A wonderful online cyber resource of articles that covers topics such as cybersecurity, Threat, Ransomware, EndPoint Protection, DataCenter, Network Security, Firewall, GDPR Compliance, and even two-minute Threat Briefs. Applipedia: An online version of the same Applipedia inside of the Web Interface. Security Advisories: This is the place to come for the latest news from the Product Security Incident Response Team at Palo Alto Networks. Security Lifecycle Review (SLR): The Security Lifecycle Review summarizes the business and security risks facing an organization, providing an opportunity to review the findings and take joint action on them during an initial evaluation or as part of a regular visibility and security checkup. Threat DB (Threat Vault): An Online Threat Database that helps correlate threat names and allows you to see where we have coverage. Unit 42: Unit 42 is the global threat intelligence team at Palo Alto Networks that delivers high-quality, in-depth research on adversaries, malware families and attack campaigns.   We hope you found this directory helpful!   ... View more

Smarter Search   Our search engine uses artificial intelligence to produce the most relevant results and suggested solutions for our end users. Through federated search across our blogs, knowledge base articles, technical documents, and discussions, machine learning continually curates all information for the best answers and information needed.   Here are some of the basics on searching in the LIVEcommunity:   General Searching To start searching,  just look for the search window at the top of every page.      From the main page, when you search, you will be searching through “All Community” by default.      How to Filter Results When you get your search results, use the filters on the left side of the page to refine your results (as seen in the screenshot above). You can refine your search using one or more filters on the left side of the page.  If you wish to search just LIVEcommunity, select LIVEcommunity under “By source”; likewise, if you wish to only search Discussions, select Discussions under “By category.”     Searching Within Categories and Boards If you perform a search from a section of the LIVEcommunity—like the Blogs Area, a Discussion board, or a technology page—you will be limited to “This Board” or “This Category”and not the entire community by default.    If you aren’t finding what you’re looking for, select the drop-down and click “All Community” to enable a broader search area.         How Does Auto Suggest Work?  Auto suggest accelerates your search by displaying results as you type search terms. When you see the post or user that you're looking for, just click it. To turn auto-suggest off, click “Turn off suggestions” at the bottom of the auto-suggest list. To turn auto-suggest on, click “Turn on suggestions” below the search entry area.              Smart Snippets   With the help of machine learning, smart snippets spare you the need to sift through a sea of search results! Relevant information and solutions to your query are now brought to your eyes before you have to click on the discussion link itself.    You also get additional search results related to your query. For example, we searched for "Renaming device groups" and listed under "People also ask" is the suggestion of "Clone a Device group?".     When searching please go ahead and let us know if you've found snippet content useful or not.   Featured Results     Imagine having the most important search results served to you on a silver platter. That's exactly what Featured Results is all about. As you can see above, they appear right at the top of your search page, marked with its own badge.    Featured results are handpicked for specific search terms and keywords. They can highlight newly-released content, important product updates or issues, and training.    Whether you're on the hunt for quick solutions or going down the rabbit hole, our latest search upgrades have got you covered.    With Smart Snippets making information more accessible and Featured Results shining the spotlight on the best content, we hope your whole community experience is a lot easier and more efficient. Happy Searching!      UP NEXT — Step 5: How to Post and Reply to LIVEcommunity Discussions   ← Return to the Welcome Guide ... View more

Just like trekking a new trail or driving in an unfamiliar city, getting around a new online community can leave you wishing like you, well, had directions. So that’s what we’ve put together here—a guide to navigating our community, so you can start zipping through LIVEcommunity like a pro in no time.    Whether you’re an old-timer looking for a refresher or a first-timer looking for a guide, please—join us as we “tour” through the LIVEcommunity ecosystem.    Getting Around LIVEcommunity: Let's Take a Tour   Discussions   LIVEcommunity Discussions is where you’ll find member-generated discussions about Palo Alto Networks products. It’s a place to find answers, get support, and share knowledge related to Palo Alto Networks tools and products. Our Discussions area is also a space to engage in conversation with peers in the cybersecurity and IT community.   To discuss a particular product, click the corresponding board in the general discussions area—you can then post directly into that forum. Our Discussions areas are a living, evolving, interactive part of our community and just as the cybersecurity landscape and available tools change, so will our forums.      Blogs   The LIVEcommunity Blog area is where you will find posts covering everything from new releases and Palo Alto Networks events to important discussions of the week (DOTW) and monthly Rewinds, where we review some of LIVEcommunity’s biggest headlines from the past month.   Stay tuned to our blogs page to find information about new products releases and features, new training tools, and more.   Articles   LIVEcommunity’s Articles page is where you will find expert-written technical documentation about Palo Alto Networks products, Tips & Tricks, and Nominated Discussions (which highlights posts with Accepted Solutions).   Note: Only customers will be able to see certain content, such as Customer Journey Guides and customer-only webinars, video walkthroughs, articles, and other technical documentation.    Products   Under the LIVEcommunity Product dropdown, you will find Individual pages dedicated to all Palo Alto Networks technologies, as well as third-party integrations and compatibility with Palo Alto Networks products.    A dedicated technology page is where you will find discussions, articles, blogs, webinars, Customer Journey Guides, events, and more resources related to that product. We are constantly adding, customizing, and enhancing the LIVEcommunity ecosystem to include all Palo Alto Networks technologies and tools.    Pro Tip: Stay up-to-date on the latest content on any page by clicking subscribing related to that product, subscribe to that page using the upper righthand Options dropdown.              Education Services    LIVEcommunity’s Education Services area is chock-full of instructor-led trainings, certifications, and digital learnings to expand your knowledge as a cybersecurity professional. LIVEcommunity’s Education Services page is a great starting place to find the educational resources offered by Palo Alto Networks and its learning platform, Beacon.     Customer Area   If you are a customer, you have a special area you can access by clicking the Customer button as shown in the screenshot to the right.  Only logged-in Palo Alto Networks customers will see the Customer drop-down in the upper righthand corner of LIVEcommunity.   The Customer area is where you find important information, resources and support, including:    LIVEcommunity’s Customer Resources page, where you’ll find release guidance information for PAN-OS software, reviewed weekly by Palo Alto Networks Support. LIVEcommunity’s Customer Advisories page, home to the latest advisories to maximize prevention and protection with updates to Palo Alto Networks products and services. If you’re a Palo Alto Networks customer, be sure to login to see the latest critical announcements and updates in our Customer Advisories area.     UP NEXT — Step 4: How to Search LIVEcommunity     ← Return to the Welcome Guide   ... View more

Now that you’ve registered with LIVEcommunity, it’s time to set up your profile. It’s as easy as 1-2-3.    1. Choose Your Avatar Picture   Once you are logged into the LIVEcommunity, you can click your username in the upper right corner of the screen and click on "My Profile" to change your profile picture/avatar. Simply click on the "Edit image" button next to your current avatar and decide if you want to upload an image from your computer, select a previously uploaded image from My Albums, or choose one provided by the community.         2. Create a Signature for Your Posts   Here’s how to create a signature for your posts: Click your username in the upper right corner, and select "My Settings." Under Personal, go to Personal Information. Enter your signature text, and save your changes. Voila!           NOTE: Please refrain from using any websites that advertise for another product or software. Doing this may cause your profile to be restricted. 3. Tell the LIVEcommunity About Yourself   Under settings, go to Personal > Personal Information. Enter information about yourself in the Biography field. You can also enter your name, location, company info, and any other information you want to share. Click Save.   Note: By default, all LIVEcommunity users can see this information.           Set your viewing preferences    You can customize your preferences within the LIVEcommunity in many ways, including time zone and language preference, text size, menu behavior, message order, and privacy settings. Here's how to set your viewing preferences:   To set your viewing preferences: Click your username in the upper right corner, and select "My Settings" Go to Preferences. Click through the various preference tabs and make the changes you want. Click Save on each tab where you make changes.             UP NEXT — Step 3: How to Navigate LIVEcommunity Like a Pro   ← Return to the Welcome Guide   ... View more

Registering with LIVEcommunity is quick and simple.   There are many benefits of registering for a LIVEcommunity account! You'll get access to member-only areas, be able to participate in conversations and provide solutions, and stay informed by subscribing to boards and receiving notifications.   Let's walk through how to create your new account together.   1. Click Register at the top of any page.     2. Select "Register for a LIVEcommunity Account."     You'll land on a page that asks you what kind of account you want to create; select the Register for a LIVEcommunity Account button. You can use your personal email address to create a community-only account. If you are a customer or partner with a support contract, then you can use your business email address and information to create a support account.     Note: If you already have a Palo Alto Networks support account, then a LIVEcommunity account is already created for you. Use those credentials to log into the LIVEcommunity. 3. Enter your email address.    There is also an CAPTCHA test that will ask you to enter special characters. Enter them and click next.   4. Enter a username.    This username which will appear whenever you post or leave a comment. You'll also enter your full name, country, and a (secure!) password. You will be asked to confirm your password and click Register.   Tip: Passwords are case-sensitive. Include capital and lowercase letters and numbers to make your password more secure.   5. Check your inbox for a confirmation email.    Once you receive the email, click the activation link. You are officially a LIVEcommunity member! Note: You must have cookies enabled in your browser to register and to sign into the LIVEcommunity.   UP NEXT — Step 2: Building Your LIVEcommunity Profile   ← Return to the Welcome Guide   ... View more

  New to LIVEcommunity? Start here.    The LIVEcommunity is Palo Alto Networks’ official online technical community with more than 317,000 global members. Our community is full of employees, partners, and peers who help each other troubleshoot issues, find answers, and make the most of their products—proving that thousands of minds working together are far more powerful than a lone engineer.   In short: LIVEcommunity harnesses the knowledge of cybersecurity and IT professionals across the globe to put insightful, helpful resources at your fingertips. We hope that LIVEcommunity will be your first stop when it comes to the adoption of Palo Alto Networks products.    Here’s a quick introduction to LIVEcommunity's most-visited areas:   The LIVEcommunity discussions area is your go-to source for troubleshooting and answers. There is a general discussion area, as well as product-specific areas, where you can go to ask questions, share answers, and exchange knowledge and support related to Palo Alto Networks products. It is not only a great place to find solutions, but to network with peers as well. Don’t worry—our experienced Solutions Engineers and Cyber Elite experts are on board and ready to help, so jump right in.   The LIVEcommunity blogs area is where you’ll find information about recent and upcoming events, new products features, and updates, and other current happenings relevant to Palo Alto Networks and the cybersecurity community.   LIVEcommunity Product pages are information-rich areas, each dedicated to a different Palo Alto Networks product or tool. These pages are where you’ll find all related discussions, blogs, articles, webinars, how-to videos, and other information about your product—all in one place. Simply click the Products dropdown and select the product you’d like more information on to head to its dedicated resource page.  Ready to get started? Head to Step 1: How to Create a LIVEcommunity Account.   ... View more

How to Contact LIVEcommunity   Do you have feedback for us? Do you like what you see or have ideas on how to improve LIVEcommunity? Send us an email at community@paloaltonetworks.com.   ← Return to the Welcome Guide   ... View more

Registration for Ignite '21 is now open!   Registration is officially open for Palo Alto Networks’ free virtual cybersecurity conference, Ignite ’21.   With cyberattacks and worries driven to unprecedented heights, is no better time to join industry luminaries, experts, and IT and cybersecurity professionals at Ignite, one of the world’s largest cybersecurity conferences.   Register for Ignite ‘21 now to learn about how you—and your company—can take advantage of next-gen cybersecurity innovation and enable a Zero Trust architecture that ensures the highest level of protection and security. The conference will take place November 15-18 and its agenda will include introductions to Palo Alto Networks products, pre-certification training, illuminating keynote speeches, groundbreaking sessions, and more.   We hope to see you there!   Register for Ignite ‘21 now.   Helpful info: The full Ignite ’21 agenda Ignite '21 FAQ page Contact igniteconf@paloaltonetworks.com with additional questions or concerns   ... View more

  Next week, Nutanix is hosting their annual Global .NEXT Digital Experience event—of which Palo Alto Networks is a sponsor—and it’s chock-full of informative sessions hosted by industry experts that you won’t want to miss.    One session we hope you join is “Mind the Zones When Securing Your Flows,” hosted by Palo Alto Networks Partner Engineer Lead Steven Riley. The recorded session will cover how  Nutanix Flow and Palo Alto Networks NGFW VM-Series can help you achieve your Zero Trust goal—quickly and seamlessly, at that.   What is Nutanix Flow?    Nutanix Flow is a feature built into AHV that allows both individual and grouped VMs to control and inspect traffic types across virtual infrastructures via their security policies. Nutanix Flow can be enabled on your AHV clusters right from Prism Central (a multi-cluster manager).    Before enabling this feature, you’ll want to ensure you have a firewall that inspects traffic and that you understand microsegmentation; this will ensure the highest level of security and protection. You can head to Prism Central Settings, check Enable Microsegmentation, and click OK to utilize Nutanix Flow.   What is microsegmentation?   Today’s hybrid cloud architectures have changed the way we approach security and network traffic flow. The north-south perimeter is too-often ignored in most traffic flows; plus, a single server can host hundreds of workloads with hundreds of corresponding unique security requirements and policies, creating a difficult workload.    When we implement microsegmentation, we can achieve a ZeroTrust approach using Palo Alto Networks’ VM-Series to monitor and regulate traffic meant to flow between the VMs as directed by the Nutanix Flow and firewall.   Here’s an illustration of the north-south security boundary, with a wide open east-west posture:   Traditional Perimeter-Based Security     The marriage of Nutanix Flow and Palo Alto Networks VM-Series enables granular monitoring of control over your environment’s network activity. As you can see in the below model, there are no unsolicited traffic flows:   Application-Level Microsegmentation     When we implement microsegmentation, we can implement a ZeroTrust approach with the Palo Alto Network VM-Series to monitor traffic, as well as ensure only traffic only meant to flow between the VMs is directed accordingly using Nutanix Flow and the firewall. Why secure East West traffic in your Hypervisor?   Without proper safeguards, attackers can abuse a lack of east-west traffic visibility to move laterally around the network once they get past the perimeter firewall. Threat actors generally move laterally in one of two ways: scanning for open ports and/or known security vulnerabilities; and infecting machines with malware via phishing campaigns.    These types of attacks can be prevented by using Nutanix Flow and Palo Alto Networks VM-Series. Learn more about how to use “Mind the Zones When Securing Your Flows” using Nutanix Flow and Palo Alto Networks NGFW VM-Series at next week’s Global .NEXT Digital Experience event! Check out the full agenda and register for the Global .NEXT Digital Experience 2021 event now.   We’ll “see” you there.    ... View more

Using Cortex XSOAR to Deal With MSHTML Zero-Day Vulnerability (CVE-2021-40444)   Technical contribution by Palo Alto Networks Security Architects Yarden Altmann and Ben Melamed. There's a new Playbook for MSHTML Zero-Day Vulnerability (CVE-2021-40444)— aka Microsoft's MSHTML Remote Code Execution Vulnerability.    CVE-2021-4044 is a Zero-Day Vulnerability with the MSHTML engine that has been found vulnerable to arbitrary code execution by a specially crafted Microsoft Office document or rich text format file.   At the time of publishing, a patch does not exist for this vulnerability—but an exploit sample is publicly available and is being actively exploited in the wild. Attackers using this vulnerability can run malicious code on the victim’s endpoint through malformed Office documents.   As part of our Rapid Breach Response program Cortex XSOAR released a new pack and a playbook to handle this vulnerability: CVE-2021-40444 - MSHTML RCE.   This playbook includes the following tasks:    Collect related known indicators from several sources. Indicators, Files and Process creation patterns hunting using PAN-OS, Cortex XDR and SIEM products. Block indicators automatically or manually. Provide Microsoft workarounds and detection capabilities.         Read the Cortex XSOAR playbook CVE-2021-40444 - MSHTML RCE now, and find further information on the Cortex XSOAR technology page.     ... View more

Design And Deploy Zero Trust Network Security   We believe Zero Trust—which eliminates implicit trust in every digital facet—is imperative to the security and success of each individual, organization, and enterprise.   That’s why Palo Alto Networks has understood the importance of a Zero Trust Architecture for years. We host many events for industry experts, customers, and network security professionals who are interested in learning more about Palo Alto Networks' groundbreaking Complete Zero Trust Network Security. Up next is an event you won’t want to miss: Design And Deploy Zero Trust Network Security For Users.    Design And Deploy Zero Trust Network Security For Users will teach you how to adopt Zero Trust across your network security stack. At this technical event, Palo Alto Networks Zero Trust Network Security experts will share actionable tips, guidance, and best practices for designing, deploying, and scaling a Zero Trust architecture. The event is a rich opportunity to leverage our Zero Trust expertise to achieve the most secure environment possible for your users.   If you want to ensure you are protecting your organization against continual cyberthreats while ensuring productivity, Design And Deploy Zero Trust Network Security For Users is a can’t-miss event. In just a half-day, you will learn the following (and much more!):   How to capitalize on the ML-Powered Next-Gen Firewalls’ latest features to ensure Zero Trust for all your users—regardless of location, type of device, or applications used How to deploy and maximize new capabilities and integrations, like Cloud Identity Engine, SaaS Security, Advanced URL Filtering, and DNS Security. Tips for architecture design and best practices that will ensure protection and security for all users and devices in your network How to build your network security infrastructure, including campuses, data centers, branches, clouds, and other sites   Bonus: Attendees of Design And Deploy Zero Trust Network Security For Users will have a chance to participate in a subsequent one-on-one guided tour of how to set up Zero Trust components—starting from square one.   You will walk away with practical, deployable, and imperative information to protect and secure you, your users, and your organization. You can see the full agenda here.   Register for the Design and Deploy Zero Trust Network Security For Users event now.   EVENT DATES AND TIMES   EAST COAST October 19, 2021 9 a.m. to 1:30 p.m. EDT   WEST COAST October 21, 2021 9 a.m. to 1:30 p.m. PDT     PAST Virtual - US West Sep. 21, start at 8:30 a.m. PT   Virtual - US East Sep. 16, start at 8:30 a.m. ET   Virtual - US Central Sep. 14, start at 8:30 a.m. CT   Want to know more?   Read more about Zero Trust in our LIVEcommunity blog, Palo Alto Networks Introduces Complete Zero Trust Network Security.   Check out LIVEcommunity’s Next-Generation Firewall technology page, community discussions, and the LIVEcommunity blog area for recent content, release notes, troubleshooting & solutions, and more regarding Network Security.    Thanks for reading!    Don’t forget to give this blog a thumbs up 👍🏽 or drop a comment down below.    ... View more