This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Vinothkumar_SBA
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Vinothkumar_SBA
09-29-2023
24Posts
0Likes
0Solutions
Sep 29, 2023Last Visited
User
Activity
User
Profile
Latest posts by Vinothkumar_SBA
| Subject | Views | Posted |
|---|---|---|
| 32 | 09-27-2023 02:33 AM | |
| 71 | 09-26-2023 06:05 AM | |
| 138 | 09-25-2023 10:40 PM | |
| 178 | 09-13-2023 10:34 PM | |
| 203 | 09-12-2023 11:34 PM | |
| 124 | 09-12-2023 11:33 PM | |
| 325 | 09-06-2023 04:42 AM | |
| 137 | 08-22-2023 09:34 PM | |
| 240 | 08-08-2023 05:50 AM | |
| 340 | 07-25-2023 12:33 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes | |||
| 2 Likes | |||
| 2 Likes | |||
| 1 Like | |||
| 1 Like |
My LIVEcommunity Articles Contributions
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 0 |
User Badges
Community Statistics
| Member Since | 10-07-2022 01:39 AM |
| Date Last Visited | 09-29-2023 01:54 AM |
| Posts | 24 |
09-27-2023
02:33 AM
Hi Nijith,
- Cortex XDR Pro per GB—Amount of total storage included with your license.
- Cortex XDR Pro per GB
An innovative solution incorporating data ingestion from multiple sources for effective detection, security analytics, and response platform based on the Cortex XDR Pro per Endpoint license.
With the Cortex XDR Pro per GB license, in addition to collecting endpoint data, you can ingest numerous data sources for complete visibility over your network traffic, and user behavior. Applied together with the Cortex XDR Pro per Endpoint license the enhanced endpoint and third-party data ingestion, the Cortex XDR Pro per GB provides streamlined investigation techniques and extensive remediation analysis capabilities.
To expand your license capabilities, Cortex XDR offers several add-ons on top of the Cortex XDR Pro licenses that allow for more granular investigation.
Cortex XDR Pro per GB
30-day Ingested Data
180-day Alert and Incident Data
Incident and alert data are retained according to the last Update and Creation dates, respectively. Data collected within these dates is kept and displayed for 180 days. To ensure the accuracy of incidents, Cortex XDR provides a grace period of up to 30 days for alerts displayed in the Incidents View, Alerts table, and Casualty View.
Please help out other users and “Accept as Solution” if a post helps solve your problem ! Read more about how and why to accept solutions https://live.paloaltonetworks.com/t5/general-topics/how-and-why-to-accept-a-solution-to-your-post/td-p/552976
... View more
09-26-2023
06:05 AM
Hi Nijith,
I have attached the link related to your queries. Please find this link, as it will be helpful for you.
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Cortex-XDR-Pro-License
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Migrate-Your-License
... View more
09-25-2023
10:40 PM
Hi Team,
We have detected several IOC incidents in the Cortex XDR console. The action status for these incidents is marked as 'detected,' but upon further investigation, we found that the internal network team had prevented these incidents in the Palo Alto firewall. Simultaneously, when we checked the Cortex XDR console's IOC incidents debug alerts, we noticed that 'action_network_success' was set to 'false.' This discrepancy raises doubts about whether 'action_network_success' being 'false' indicates prevention or detection."
... View more
09-13-2023
10:34 PM
Hi@PiyushKohli,
We have configure the API integration.
... View more
09-12-2023
11:34 PM
We have planned the configuration of the Cortex XDR Cloud Identity Engine for our on-premises service. Could you please tell me whether the Cloud Identity Engine agent should be installed on the AD server or on a separate (NEW) server? What is the best method?
... View more
09-12-2023
11:33 PM
We have planned the configuration of the Cortex XDR Cloud Identity Engine for our on-premises service. Could you please tell me whether the Cloud Identity Engine agent should be installed on the AD server or on a separate (NEW) server? What is the best method?
... View more
09-06-2023
04:42 AM
We are currently integrating the Cortex XDR incident logs with the Splunk tool. Currently, the incident logs are visible in the Splunk tool, but certain essential fields required for conducting an XDR log investigation are not available in the existing logs. These necessary fields include File Name, File Path, File Hash, Command Line, Grand Parent Name, Parent Name, Grand Parent Command Line, Parent Command Line, IOC value, and a few others.
... View more
08-22-2023
09:34 PM
Hi thanks for your information please clarify one more question. in-place operating system upgrades that means.
... View more
08-08-2023
05:50 AM
We have been using Cortex XDR for over 200 days without any temporary exceptions. However, it has only been allowed for 180 days. How can we resolve this problem? I have attached a screenshot for your reference.
... View more
07-25-2023
12:33 AM
We have received mail from Palo Alto. This mail informs about the new broker VM deployment, which does not update the old broker VM. Therefore, it is mandatory to apply this process ?
Dear Valued Customer,
We are happy to announce that we have released a new image for the Broker VM. The new image is available to download from your Cortex XDR tenant as of July 9th, 2023.
The new Broker VM version introduces enhanced capabilities, as well as an updated operating system (Ubuntu 20.04).
Since previous Broker VM versions do not support in-place operating system upgrades, you need to replace the current Broker VMs deployed in your environment with new brokers based on the new image . Going forward, upgrading Broker VMs to a new version will only be supported by brokers installed with this new image.
This one time upgrade ensures that going forward you can upgrade to the latest supported Broker VM version and continue to benefit from new features.
Instructions for the migration process are explained here.
To provide a seamless Broker VM experience, we have also added support for in-place operating system upgrades, so future upgrades no longer require replacing the Broker VM.
Brokers installed with an image, downloaded prior to July 9th, 2023 and updated to the latest broker version 20.x, will be supported and continue to receive security updates and critical bug fixes until January 23, 2024.
If you have any questions, please reach out to our Customer Support team.
Sincerely,
Cortex Product Management
... View more
07-17-2023
09:43 PM
This email was received from the PA team regarding the new upgrade, but the agent version number appears to be outdated. Please validate and provide further information.
Dear Valued Customer,
We are happy to inform you that the Cortex XDR agent 7.9.3 maintenance release is scheduled for General Availability (GA) on July 31st, 2023. Our maintenance releases resolve known issues and enhance performance, and we strongly recommend that you always upgrade to the newest release of the latest agent line.
The complete list of issues included in this maintenance release can be found in the Cortex XDR Agent 7.9.3 release notes.
If you have any questions, please reach out to our Customer Support team.
Sincerely,
Cortex XDR Product Management
*Note: The final GA date may be delayed for up to 4 business days, and the content for this release might contain some changes until the final GA. Should the delay go beyond this date, an additional notification will be sent.
... View more
07-05-2023
01:57 AM
Thank you for your support! We have one more query. Could you kindly confirm the log retention period for all the forwarded logs to the XDR cloud?
... View more
07-01-2023
01:19 AM
We have created a report template in the Cortex XDR console for endpoint status. The creation was successful, but the generated report only displays the endpoint status in an Excel format. However, we would like to view the endpoint host list status in PDF format. Please advise on how to achieve the desired PDF format for the endpoint host list status.
... View more
06-29-2023
10:43 PM
We have configured the Check Point firewall version (R81.10), but it is not supported for native log ingestion. However, we have checked the official Palo Alto documentation for this link: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Ingest-Logs....
-It states that log ingestion and data require a Cortex XDR Pro per GB license.
-We have purchased a TB license.
-I will need to confirm whether it is possible to ingest CEF logs from Check Point software version R81.10.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-29-2023
01:54 AM
|
Latest Tags
No tags yet
Likes Given To
| User | Likes Count |
|---|---|
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks