This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About joseph.lim
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About joseph.lim
02-03-2023
6Posts
0Likes
0Solutions
Feb 03, 2023Last Visited
User
Activity
User
Profile
Latest posts by joseph.lim
| Subject | Views | Posted |
|---|---|---|
| 347 | 02-02-2023 08:30 PM | |
| 251 | 02-01-2023 11:56 PM | |
| 223 | 02-01-2023 11:51 PM | |
| 372 | 02-01-2023 11:45 PM | |
| 436 | 02-01-2023 08:04 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 12-13-2022 07:32 PM |
| Date Last Visited | 02-03-2023 12:57 AM |
| Posts | 6 |
02-02-2023
08:30 PM
Hi Community,
Hope fellows can provide some insights. I have received a suspected DGA alert from my MSSP and upon validating with XDR, it shows Network Services is making such queries. As the domain is my internal domain with gibberish sub-domain, I'm fairly confident this is not a positive DGA incident. What might cause such behavior? Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.
... View more
02-01-2023
11:56 PM
1. Check internal firewall.
2. Check enterprise firewall if any of the pre-requisite url is blocked
3. If brokervm is implemented, check if proxy is set.
4. Check if services is up by > cytool runtime query
... View more
02-01-2023
11:51 PM
I use https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Compatibility-Matrix/Linux to determine the compatibility.
... View more
02-01-2023
11:45 PM
Thank you. I will do that.
... View more
02-01-2023
08:04 PM
Hi community,
I had encountered a weird scenario where my endpoint failed in updating its agent when I triggered it from the XDR portal. It connects to BrokerVM for updates, as with the same as the rest which succeed.
Network check: I have updated over 90 endpoints, some of which belongs to same network passed.
Internal Firewall check: Internal firewall are off.
Retry: at least 2 retries had been attempted.
XDR Service Check: Services all running (See attached)
Status: Online
Connectivity test: Looks ok (See attached)
What might have I missed out on?
Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended. Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-03-2023
12:57 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks