Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About fmoixsante
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About fmoixsante
7 hours ago
20Posts
4Likes
6Solutions
Jun 24, 2021Last Visited
User
Activity
User
Profile
Latest posts by fmoixsante
| Subject | Views | Posted |
|---|---|---|
| 26 | yesterday | |
| 191 | 3 weeks ago | |
| 150 | 3 weeks ago | |
| 223 | 3 weeks ago | |
| 293 | 05-18-2021 08:46 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 3 weeks ago | |
| 1 Like | 05-18-2021 08:46 AM | |
| 1 Like | 04-22-2021 07:55 AM | |
| 1 Like | 04-21-2021 04:34 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 6 Likes | |||
| 4 Likes |
User Badges
Community Statistics
| Member Since | 05-31-2017 02:47 AM |
| Date Last Visited | 7 hours ago |
| Posts | 20 |
| Total Likes Received | 4 |
yesterday
@PeteJacobCF, if the word password is not in the name, XDR/XQL will not be able to tell you that a file is not password protected.
... View more
3 weeks ago
1 Kudo
Hi @Joe_Botelho , The scan will start at the endpoint's local time.
... View more
3 weeks ago
@akshayhariRajan You could create a BIOC for that file specifying a behavior and add that BIOC to a Restriction profile.
... View more
3 weeks ago
Hi @rbuchwalder , You can use the option "add to Allow/Block list". You can add up to 100 hashes. But you need to add the hashes one by one to the action task. If you want to add them in a more automated way, you could use Cortex XDR API to accomplish this. Add to Allow List - API Add to Block List - API
... View more
05-18-2021
08:46 AM
1 Kudo
Hi @venkat_n7, Please refer to this article to understand how Cortex XDR does threat protection. Cortex XDR will not be able to prevent someone from downloading malware. That's a NGFW feature. Cortex XDR has several protections modules that will activate during execution. Please refer to the above provided link.
... View more
04-29-2021
09:44 AM
Hi @aliCommunity, First you would need if the Distro/Kernel of your server is supported. Please refer to this article. Afterwards, please follow the installation steps outlined on Cortex XDR admin guide for Linux.
... View more
04-27-2021
06:14 AM
Hi @OrkanAlibayli , Are you using the latest version of the BrokerVM, v11.3.13? If yes, are you able to stop it and re-activate the proxy again?
... View more
04-23-2021
11:26 AM
Hi @Besnard, Just out of curiosity, what's the reason for the regular reinstallation of your endpoints? Thanks in advance.
... View more
04-22-2021
07:55 AM
1 Kudo
Hi @OrkanAlibayli Third party vendor FW logs, like Fortigate, do only show in the XDR console. Please refer to this Admin guide article. @ahmadaliyev The Cortex XDR Alerts do not show in the Explore app. This app is exclusively for PAN NGFW logs. If you want to view Alerts you need to go to Investigation > Incidents > Alert view.
... View more
04-22-2021
02:54 AM
Hi @OrkanAlibayli , You need to send your PAN NGFW logs to CDL so that whenever Analytics get trigger, Pathfinder will then try to gather information from the involved endpoint/s.
... View more
04-21-2021
05:09 AM
Hi @MCereda , You can whitelist folders for almost every malware module, except for Ransomware and Password Theft Protection. For the Exploit module, disabling protections for a single folder is not supported as far as I know. As of now, there is no way to do that directly from the Exploit module. I would suggest contacting TAC and ask them if a Support Exception (SUEX) would be able to achieve what you want to do.
... View more
04-21-2021
04:34 AM
1 Kudo
Hi @OrkanAlibayli , To be able to use Pathfinder, you need to first have a Cortex XDR Pro per TB license and have your PAN NGFW send logs to Cortex Data Lake. Also, Pathfinder is only able to gather information from Windows endpoints. Do you have the above requirements? Please do also follow this article for Pathfinder. Activate Pathfinder (paloaltonetworks.com)
... View more
04-21-2021
03:08 AM
Hi @MCereda , You still have Child Process Protection, Office files with Macros and Ransomware. I need to point out that active whitelisting is NOT really recommended except for " Portable Executable and DLL Examination" as Local Analysis could indeed block legit applications, and it could take WF up to 10-15 minutes to provide a benign verdict. The other modules have different kind of protections and I would only recommend whitelisting whenever there is a false positive alert. You need to monitor your incidents/alerts and see which modules are blocking your "legit" applications.
... View more
03-19-2021
09:37 AM
Hi @JamesPoehlman, As of now, that is not an option supported in the Host Insights add-on. I would suggest you reach out to your PANW account team to raise a New Feature Request (NFR) with the dev team. Thanks.
... View more
03-19-2021
09:31 AM
Hi @JamesPoehlman, As of now, that is not an option supported by the Broker VM Pathfinder Applet. I would suggest you reach out to your PANW account team to raise a New Feature Request (NFR) with the dev team.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
7 hours ago
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
