About AhmedSadek

Dear Team,   Our question is "How can the firewall choose the route without configuring the ECMP"   Appreciate your support as mentioned in this documentation https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/ecmp   " Without this feature, if there are multiple equal-cost routes to the same destination, the virtual router chooses one of those routes from the routing table and adds it to its forwarding table; it will not use any of the other routes unless there is an outage in the chosen route"   Best Regards, Ahmed Sadek ... View more

Dear Team,   Appreciate your feedback as we facing challenges with LEEF format when we configure a Syslog server with a custom log to allow integration with the Qradar SIM solution.   We use the same format as mentioned on the IBM website below, https://www.ibm.com/docs/en/dsm?topic=panps-creating-syslog-destination-your-palo-alto-pa-series-device   But it is not working with PAN-OS 10.2   So appreciate your feedback, If you have any workaround solution for this format.   Thanks   ... View more

Dear Team,   Appreciate your support and advice if Windows Server 2022 is officially supported, for running the User-ID agent yet?   As the below article didn't mention the Windows Server 2022. https://docs.paloaltonetworks.com/compatibility-matrix/user-id-agent/where-can-i-install-the-user-id-agent.html https://docs.paloaltonetworks.com/compatibility-matrix/user-id-agent/which-servers-can-the-user-id-agent-monitor.html#id48730da4-e269-4a3b-aeae-ea577c5c04ea   As the User-ID Agent version "10.1.0-21" does not map users on windows server 2022.   Thanks in advance, ... View more

Dear Team,   Appreciate your support for the below. Can we have integration with external sandboxes such as TrendMicro sandbox (DDAN) through API?   Thanks in advanced ... View more

Hi team We received this vulnerability in the report by our vendor for our PA "According to the self-reported version in the script, the version of JQuery hosted on the remote web server is greater than or equal to 1.2 and prior to 3.5.0. It is, therefore, affected by a cross site scripting vulnerability" and solution for this its saying "Upgrade to JQuery version 3.5.0 or later." and PA TAC suggested that below, "Currently there is no scheduled release date for the JQuery 3.5.X library within PAN-OS however it is is presently going through QA and being evaluated for future release. Please note PAN-OS uses a small subset of the JQuery function and so it is not impacted by the cross-site scripting vulnerability in said JQuery version. In addition engineering released signature coverage for CVE-2020-11022 and CVE-2020-11023 in Content update 8281 with Threat ID 57176 which detects HTTP Cross Site Scripting Vulnerability. Please apply it to traffic including GlobalProtect if you are using it." So that time it was under QA testing and there were no ETA provided so please advise for any permanent solution provided for this vulnerability.   Thanks, ... View more