About GlennSJ

Congrats on the PCCSA!   ... View more

Hey Tucker, Don't be discouraged but send them another email.  Use the time to drill the labs and anything you are shaky on.  If nothing back in another week send me a private message and I'll see what I can find, I don't work for Palo Alto Networks, but for a reseller in DC area and am a vet myself and PCNSE.  If you get nothing back I'll start emailing around to find who at PA is responsible for the Second Watch program and see if we can shake lose a voucher. Glenn ... View more

FYI - in response to previous poster who had problems.  I opened a cmd prompt as Admin and created the directory c:\program files\Git\var.  Then using explorer I modified security rights,  granting users Modify rights.  After that it worked.  I did get a prompt that Docker wanted to share and I allowed that. ... View more

Take a look at this, destination nat example one address to many servers behind the firewall, of course each server must be on different port. https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/nat/nat-configuration-examples/destination-nat-exampleone-to-many-mapping ... View more

Calling a couple weeks ago about this, support said 7.0.2 is recommended over 7.1.x at that time.  YMMV ... View more

I'd open a ticket, to at least get that process started.     We found with non-persistent VDI they are only licensed when a user is logged into the vm.  Once they log out it releases the license until another user logs into that machine (this is with floating user assignment not dedicated).  If you are using Palo Alto NGFW at the perimeter, something we found that wasn't in the documentation is that it needs "google-base" in addition to "cortex-xdr" in the outbound security policy.  If you think it is a communication issue check your traffic logs on the firewall to see if you are seeing any "deny" actions from that machine.   edit:  FYI - cortex-xdr depends on ssl, web-browsing   ... View more

Does that same install work on another machine in your environment?  It wasn't clear to me if you're already using Cortex XDR and just adding it to VDI or if Cortex XDR is new to your environment. ... View more

Interesting point on the support matrix.  We've called support numerous times (we've used TRAPS for years) and never caught any blowback about running it in View.  The agent instructions still have the blurb about installing in a non-persistent VDI environment.  I see Citrix listed on the compatibility matrix but wonder if that is actually compatibility for using app virtualization to package/deploy the Cortex agent (which is supported) vs support for Windows 10 running on those platforms.  We've found it to be lighter on the endpoints than any of the signature based AV we used in the past, admittedly we haven't used that stuff for some years now, and appreciate that it uses some intelligence to weed out bad software without relying on signatures which are bound to be out of date. ... View more

My 2 cents, based on view 7.4 then 7.10, persistent clones, now non-persistent linked clones, Win 7 now Win 10. Test in a Test pool 6.1.3 works 6.1.4 doesn't work it comes up unlicensed 7.0.2 appears to work   Follow the instructions VDI_ENABLED=1 do imageprep everytime you change image   Issues for us were less around resource consumption and more around conflicts with drivers, or with software that is restoring the profiles (we use Profile Unity).  Some of this was resolved with whitelisting, but since moving to the TRAPs in the cloud we haven't had to whitelist much.  The most frequent problem is with other IT folks saying "it's TRAPS!" for any problem that happens. ... View more

Yes Cortex XDR is supported.  Use the VDI_ENABLED=1 switch when installing in the base image.  There is also an imageprep process to go through when creating the image, and when adding files to the image later.  All this is documented in the Admin guide.  I don't know about the licensing question. ... View more