This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About AsifSid
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About AsifSid
04-28-2022
22Posts
1Like
0Solutions
Apr 28, 2022Last Visited
User
Activity
User
Profile
Latest posts by AsifSid
| Subject | Views | Posted |
|---|---|---|
| 634 | 01-04-2022 01:42 AM | |
| 509 | 12-15-2021 02:36 AM | |
| 573 | 11-15-2021 09:36 PM | |
| 1322 | 07-22-2021 04:08 AM | |
| 800 | 06-18-2021 06:14 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 01-04-2022 01:42 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 04-12-2018 12:09 AM |
| Date Last Visited | 04-28-2022 02:51 AM |
| Posts | 22 |
| Total Likes Received | 1 |
01-04-2022
01:42 AM
1 Kudo
Hi All. From the Palo alto advisory as per below, we have to run a batch file via our SCCM tool. But I need to understand what version of log4j we are using on our Cortex. How can we find out , Please help To ensure you disable message lookup, follow the following steps: Disable Log4j message lookups environment variable XDR Pro customers - From the Action Center, select Actions > Run Endpoint Script and in the SCRIPT field select execute_command. Specify the Commands_lists(list) field as setx LOG4J_FORMAT_MSG_NO_LOOKUPS true /M. In the next screen, you will have an option to select the target machines. XDR Prevent customers - Execute the following batch script with administrative privileges on your machines: https://storage.cloud.google.com/panwxdr-staticfiles/apply_log4shell_workaround.bat
... View more
12-15-2021
02:36 AM
Hi All, Last night Cortex agent got uninstalled automatically on my system and then I had to install it back manually. There are no logs in agent audit logs for this in cortex console. We need to find out why this was uninstalled automatically. Will windows event logs help? Any suggestions Regards Asif Siddiqui
... View more
11-15-2021
09:36 PM
Hi All, Finally we will be upgrading our Cortex xdr prevent to the pro version. Though we would be getting professional services support on this, I need to understand the entire project plan for this Can anyone help me understand as I would be leading this in my organization. I need to know the prerequisites , the actual process, and post upgrade things. Thank you.
... View more
07-22-2021
04:08 AM
Hi All, I have accidently deleted endpoints in cortex console. Can you please advise how to get back those deleted. Regard Asif Siddiqui
... View more
06-18-2021
06:14 AM
Hi All, I have been notified that few of the users are receiving errors (attached) related to Cortex. I need to investigate this but not sure where to start and what to look for, Can anyone guide me here. Regards Asif Siddiqui
... View more
06-13-2021
06:26 AM
Hi Team, We have been notified that Cortex is taking up a lot of memory on Desktops and servers, is there any performance tweaks you can make? Cortex XDR also impacting opening of files on the shares, I need to understand what all things we can check if cortex is impacting the performance of the system where it is running? Regards Asif Siddiqui
... View more
06-09-2021
11:43 PM
Hi All, I have been assigned a task where i need to do cleanup in Cortex xdr, this is specifically for agent clean-up to determine how may more licenses we required. I need to understand what all things I should check and perform. Regards Asif Siddiqui
... View more
- Tags:
- Cortex XDR
05-23-2021
07:52 AM
Hi All, I have have received a notification in Cortex console (top right corner) where it says "Your license has expired or exceeded its capacity, Please contact support" We have a license capacity of 6000, I need to understand Is it really the capacity has exceeded? or do I need to do some kind of clean-up to release any unused licenses. Even if the license capacity is exceeded how can I explain to the manager that yes its exceeded i need to show the data, Please help. Regards Asif Siddiqui
... View more
05-23-2021
07:34 AM
Hi Team, I need to create a new user account in Cortex console, Currently My role is app administrator of the Cortex xdr app (I never created any user account previously) This user account requirement is for the user who will be working on the Integration task (Cirtex xdr integration with Qradar). Can app administrator create new user account in Cortex xdr? How to create user account? What role should I assign (Specifically for integration) Regards Asif Siddiqui
... View more
05-23-2021
07:24 AM
Hi All, We have a new requirement where we need to integrate Cortex xdr with IBM Qradar and for this integration I have a IBM guide where it ask to download and install cortex xdr app, which we did, however from Cortex side (in Console) there are few steps which we need to follow like creating a syslog server etc, If anyone has performed this integration already or understand it more better, then please elaborate in simple language so It would be more easy for me explain it further to the relevant team. Regards Asif Siddiqui
... View more
05-17-2021
07:16 AM
Hi All, I have started facing an issue where whatever actions start via action centre, First it says "Pending" after that it turns to "In progress" status. and it stays there , It never shows status as "Completed successfully" Just to test, I initiated the scan on my own system and for more than 1hour status is "in progress" (Usually the scan finishes in half an hour. Same with agent uninstallation task, Not sure what's causing this. Could anyone help here? Regards Asif Siddiqui
... View more
04-23-2021
12:39 AM
Hi Gjenkins, There is one more question I have that if we are upgrading the agent version via the SCCM tool (deployment tool), do we need to uninstall the old version first and then install the new version or we can upgrade on top of the old version. Regards Asif Siddiqui
... View more
04-22-2021
12:37 PM
Hi, Could you please elaborate more on the logic?
... View more
04-16-2021
09:13 AM
Hi gjenkins, Thank you so much for your reply, The criteria or reason for excluding those systems from upgrading is that those systems used by certain client users to connect to their network via Citrix, and there is a host checker which checks the host before allowing the connection and cortex agent version 7.3 is not on their list of supported AV (only version 7.1 is supported which is soon going to be the end of life). Since the end of life for version 7.1 is 4rth June 2021, so we want to upgrade all the systems to version 7.3 and exclude the remaining systems. Now I have created a static group for these systems to be excluded from the upgrade. I need to understand when I will create an agent policy for auto-upgrade these static groups should be excluded. One more question is if we decide to use the Bigfix tool (it's like the SCCM tool) to upgrade from 7.1 to 7.3 , any idea if we can install the new version on top of the old version? or do we have to uninstall the old version first and then install the new version? Awaiting reply. Thanks! Regards Asif Siddiqui
... View more
04-16-2021
01:06 AM
Hi All, We need to upgrade the cortex agent from version 7.1 to 7.3 via console. My concern is how can we exclude a certain range of endpoints (Suppose we have 5000 endpoints and we want to exclude 800 endpoints) from upgrading. I have created an endpoint group that we want to exclude. but not sure how to exclude. Can anyone please advise? Regards Asif Siddiqui
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
04-28-2022
02:51 AM
|
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks