LIVEcommunity - About Marsooq_A

Marsooq_A · ‎01-28-2021

Hi Team, what is the recommended/ best practice logging option for policies with action set as deny/drop? is it "log at session end" or "log at session start"?

Marsooq_A · ‎10-30-2020

I cannot set the action as allow as we need to deny all the traffic hitting interzone policy. The requirement is , i have placed a policy with destination as specific url category. Somewhat the traffic from source machine hitting the default interzone policy and were i have action set as deny. and my requirement is , what urls that the source machine tried to reach.

Marsooq_A · ‎10-30-2020

Hi team, We have a url filtering profile created for monitoring with action of all category as alert. And this profile has been called on default interzone policy (action deny). But nothing is gets logged, we have many traffic hitting default interzone policy and the aim is to monitor urls hitting this policy. Can anyone help on this?

Marsooq_A · ‎10-25-2020

Hi, In plaolto bgp routing table, Local rib is showing the same subnet as prefix flag nexthop 172.16.50.0/24 = 172.16.1.9 172.16.50.0/24 * 172.16.1.5 what does this "=" means?

Marsooq_A · ‎09-19-2020

I was not subscribed.

Marsooq_A · ‎09-08-2020

@Ryan_Saulsbury What you provide is informative, But this is not showing the content version, how do i match this with our agents?

Marsooq_A · ‎09-07-2020

Hi Team, How to check and find cortex xdr content update release date? Cloud portal only showing the version and how to manually push the content update to some selected endpoints?

Marsooq_A · ‎07-09-2020

Hi Team, We have Host firewall profile enabled to block access to some of the IP address.How can we check these logs, if any users tried to access these blocked ip addresses and at what time they tried so. please advise.

Marsooq_A · ‎06-20-2020

@MP18 If i have panorama running 9.0.6 and firewalls running 9.0.7, is that a problem?

Marsooq_A · ‎06-20-2020

Hi Team, we have firewall running version 9.0.6,9.0.4 and 9.0.7, well in this case what could be the suggested version of panorama? i have heard , panorama should run with same or later version firewall OS, Is it talking about the major version like 7.x,8.x or 9.x or talking about minor release?

Marsooq_A · ‎06-02-2020

Marsooq_A · ‎06-02-2020

wildfire only showing the result of files were forwarded from our security devices.its not showing the global database over there. for eg: 7e27e33ec3df0ea9e89d32b050f1f0a211e3764818b9cad19308b8c954a02f03

Marsooq_A · ‎05-28-2020

Hi Team, Our cyber security department has shared few hashes and asked to check the these hashes verdict? How to check a hash is malware or benign? how to perform this on cortex xdr portal?

Marsooq_A · ‎05-28-2020

@dfalcon Thanks for the suggestion, its working with cmd with admin privilege

Marsooq_A · ‎05-28-2020

@dfalcon , Yes the endpoint is configured with right policy.

Member Since	‎05-14-2020 05:39 AM
Date Last Visited	a week ago
Posts	23
Total Likes Received	2

Online Status	Offline
Date Last Visited	a week ago

Logging for deny/drop policy

Re: view the urls hitting default interzon policy

view the urls hitting default interzon policy

Paloalto firewall bgp local rib

Re: Cortex XDR content update

Re: Cortex XDR supervisor password

Logging for deny/drop policy

Re: view the urls hitting default interzon policy

view the urls hitting default interzon policy

Paloalto firewall bgp local rib

Re: Cortex XDR content update

Re: Cortex XDR content update

Cortex XDR content update

Host Firewall Logs

Re: Panorama suggested version

Panorama suggested version

Re: Cortex-XDR hash verdict

Re: Cortex-XDR hash verdict

Cortex-XDR hash verdict

Re: Cortex XDR supervisor password

Re: Cortex XDR supervisor password

Network Security

Cloud Security

Security Operations