This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Grady
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Grady
05-22-2023
21Posts
4Likes
0Solutions
May 22, 2023Last Visited
User
Activity
User
Profile
Latest posts by Grady
| Subject | Views | Posted |
|---|---|---|
| 617 | 01-29-2023 01:43 AM | |
| 356 | 01-29-2023 01:03 AM | |
| 609 | 01-29-2023 12:53 AM | |
| 1004 | 08-10-2022 11:45 PM | |
| 1302 | 08-10-2022 11:03 PM | |
| 1436 | 08-10-2022 06:08 PM | |
| 1006 | 04-08-2022 12:10 AM | |
| 1161 | 03-23-2022 12:42 AM | |
| 1237 | 03-21-2022 04:37 AM | |
| 1593 | 03-17-2022 07:15 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 01-29-2023 01:43 AM | |
| 1 Like | 01-29-2023 12:53 AM | |
| 1 Like | 03-11-2022 02:00 AM | |
| 1 Like | 01-07-2022 06:59 AM |
Posts I Liked
User Badges
Community Statistics
| Member Since | 10-08-2021 12:44 AM |
| Date Last Visited | 05-22-2023 08:05 AM |
| Posts | 21 |
| Total Likes Received | 4 |
01-29-2023
01:43 AM
1 Kudo
If you have a Paloalto firewall as an exit, you can use GlobalProtect and enable Enforce GlobalProtect Connection for Network Access to ensure that you must dial into GlobalProtect to access the Internet You can refer to the following connection step 4 https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-portals/customize-the-globalprotect-app
If there is no Paloalto firewall, consider using desktop management software like Symantec for control
... View more
01-29-2023
01:03 AM
First you need to check if only android users or all users are connecting failed If the connection fails, I think it may be a configuration problem or an operator problem If only Android users fail, you can check if the GlobalProtect portal contains special characters, maybe characters like "_", because I have encountered the same problem before.
BTW, Android users should need GlobalProtect License
... View more
01-29-2023
12:53 AM
1 Kudo
As far as I know, Cortex XDR does not support the function of blocking WIFI connection
... View more
08-10-2022
11:45 PM
Hi Marvin
At present, I haven't logged into the endpoint to see the trapd.log, because this endpoint is not within my scope, I can only see the failure in the endpoint log from the console, and it still fails when I try to force check-in. The endpoint is connected to the Broker VM
... View more
08-10-2022
11:03 PM
Hi Marvin
I found that content update failed by looking at the audit log of the endpoint on the cloud console. I just want to know the mechanism
... View more
08-10-2022
06:08 PM
Does anyone know the Cortex XDR Auto update mechanism? I recently found that some agents failed to update automatically. The failed content included content update and agent update. The console log did not give the reason for the failure. What are the reasons for the update failure? How often will the content update be triggered again after a failure?
... View more
04-08-2022
12:10 AM
I have a security event, I clicked in and found that the CGO signature is unsigned, but when I create an alert exception, it recognizes the signer, why is that? The signature is not recognized, but the signer can be recognized
... View more
03-23-2022
12:42 AM
Hi @fmoixsante Thank you for your feedback, is there any news, there is no malicious intent, I just want to ask if this is a bug?
... View more
03-21-2022
04:37 AM
Recently, by purchasing a per TB licence, I integrated the logs of the Fortinet firewall, but I found that the daily data volume in the data ingestion dashboard and the log volume in the Fortinet datasets do not match. The dataset of the Fortinet only shows 411G. According to the data ingestion dashboard, the total number should be 592G. I checked other datasets and found no mixing of Fortinet logs. Has anyone encountered this situation?
... View more
03-17-2022
07:15 AM
Thank you for your reply, the Fortis dataset has data today, I think it should be caused by the Broker cache
... View more
03-16-2022
07:55 AM
Hi Etugriceri I checked unknown_unknown_raw in xql, and I didn't find the data of the tower, this seems to be a confusing problem
... View more
03-16-2022
03:42 AM
First of all, I have a per TB license, so today I integrated the data of the fortigate firewall, forwarded it to the broker through the log, and opened the syslog applet on the broker. Configured according to the admin guide, the firewall is given to the broker in cef format. Now the xdr cloud data ingestion Dashboard can see the Fortinet log, but the Fortinet log cannot be seen in the dataset, why is this? Will there be a delay? dashboard dataset
... View more
- Tags:
- XQL
03-16-2022
01:45 AM
Hi Etugriceri Thanks for the explanation, then if I have XDR Pro per TB, I can see firewall logs in datalake, right? For example, can forinet logs be quota in datalake?
... View more
03-16-2022
01:41 AM
Hi Bbarmanroy Thank you for your explanation, but there are still some doubts. I understand that the license of 200 pro can store data for 30 days. Does the 30-day data belong to the range of 1TB? What happens if you exceed 1TB
... View more
03-15-2022
11:47 PM
I saw that there is datalake in the official admin guide structure, but I don't know what datalake does. I bought 200 XDR pro licence and found that my account has more datalake, which has 1TB of storage space. I am very confused. What data is it used to store? I didn't buy a per TB license. Actually my XDR has some data, but I don't see it in datalake
... View more
- Tags:
- XQL
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-22-2023
08:05 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks