Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- ›
- About Graeme_Riddell
About Graeme_Riddell
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
09-18-2020
14Posts
2Likes
0Solutions
Sep 18, 2020Last Visited
User
Activity
User
Profile
Latest posts by Graeme_Riddell
| Subject | Views | Posted |
|---|---|---|
| 648 | 09-10-2020 02:39 AM | |
| 737 | 09-08-2020 05:53 AM | |
| 1065 | 07-16-2020 01:04 AM | |
| 632 | 07-15-2020 06:16 AM | |
| 1569 | 07-15-2020 06:13 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 | 07-15-2020 06:13 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 |
User Badges
Public Statistics
| Date Registered | 01-29-2019 01:25 AM |
| Date Last Visited | 09-18-2020 05:51 AM |
| Total Messages Posted | 14 |
| Total Likes Received | 2 |
09-10-2020
02:39 AM
Thanks very much Kasey.
... View more
09-08-2020
05:53 AM
Cannot find any link for the release notes of Agent version 7.2.0. Kind Regards, Graeme
... View more
07-16-2020
01:04 AM
Thanks very much David.
... View more
07-15-2020
06:16 AM
Hello, The Cortex Host Firewall integrates with Windows Firewall and therefore it is the Windows Firewall logs at the moment you would need to check. Kind regards, Graeme
... View more
07-15-2020
06:13 AM
2 Kudos
Hello, I recently had an engagement with the Paloalto Cortex XDR Customer success team and previous to that TAC about Windows Firewall. Cortex XDR pro agent DOES NOT disable the Windows Firewall it actually uses the Windows Framework and both rules In Cortex Host firewall and Windows Firewall are utilised. I have raised a Feature Request to question this design to have either Windows Firewall disabled if using Cortex Host Firewall, or at least a central place to administer overall rules that are taking precedent. As yet I have had no feedback. Kind regards, Graeme
... View more
07-15-2020
06:08 AM
Hello, I have just downloaded and installed on 10 x machines for testing Cortex XDR Pro agent version 7.1.2 Been "hunting" about Paloalto portals for release notes and found nothing as yet relating to this latest agent version, have i missed them? Can someone please point me in the correct direction, thanks? Kind regards, Graeme
... View more
05-21-2020
08:13 AM
Thanks for the reply, we are also using the Log Forwarding App from the Hub Portal. Also got it configured in Cortex XDR console also. Thanks, Graeme
... View more
05-19-2020
01:13 AM
Hello David, I would prefer LEEF as I am trying to also get the Paloalto Networks App working in QRadar and that stipulates that it requires LEEF. Although I am failing miserably on that front aslo, but I dont appear to be alone on that front according to what I have read. Thanks< Graeme
... View more
05-12-2020
12:42 PM
Does anybody have and experience to share on this setup please? Thanks, Graeme
... View more
05-12-2020
12:27 PM
We are having the same issue as well no data shown in app which is really disappointing.
... View more
04-09-2020
08:04 AM
Does this Article relate to PAN-OS version 9 ? https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEcCAK As I am trying to get feeds into the Palalto Networks App in IBM QRadar and I believe these "LEEF" formats are required but the article only states upto PAN-OS 8.0 and 8.1from what I have read. Many Thanks, Graeme
... View more
03-20-2020
05:09 AM
Completely agree with you. But I have no budget to pay up the EPS count addition for our SIEM.
... View more
03-19-2020
02:41 AM
Thanks for the reply. That's is exactly where I ma , trying to configure the correct filter for "globalprotect" user authentications and trying to create the correct filter to exclude those logs from being forwarded, as yet I have failed miserably on constructing the correct filter. Many Thanks, Graeme
... View more
03-18-2020
09:07 AM
I am trying to find the correct configuration to prevent or exclude globalprotect logs from forwarding to our SIEM. I have filtered the type of event "globalprotect" but dont seem to be able to configure this as a filter in my log forwarding on my appliance. The above log entry is from "System" but this is not listed as a log type to choose from for forwarding. As expected with increased home working our Events Per Second count has rapidly increased and I would like to exclude this type of traffic from forwarding to SIEM but keep what I originally had. Any advise or tips very much welcome. Kind regards, Graeme
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-18-2020
05:51 AM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
