CVE-2023-50164 Apache Struts Vulnerability

Hi I would like to enquire if any Palo Alto products are affected by the above vulnerability. 

Thanks. 

PAN-OS logs

I looking for the log file that tracks the IP addresses of devices that have connected to our Palo Alto Networks firewall.

I am interested in any logs that show source and destination IP addresses for network connections.

Could you please point me to

Are there signature release for following vulnerabilities?

Hello
I'm Tomoyuki Nakamura.

Are there any plans to release signature for the vulnerabilities below?.
These were not listed in THREAT VAULT or Security Advisory.

CVE-2024-8932
CVE-2024-11236

Best Regards,
Tomoyuki Nakamura

Container Base images

In Prisma cloud how do i track base images. that is the know who is using the defined base images and who is not using them. like can i get a list of all containers leveraging the defined base images? 

Parallel EDR File Exclusions for cortex xdr

Hi Everyone,

I am currently setting up Cortex XDR to run alongside a parallel EDR solution and want to ensure proper exclusions are configured to avoid conflicts and performance issues.

Could anyone share the recommended file and folder exclusions sp

where may download XdrAgentCleaner.exe

where may download the file :XdrAgentcleaner.exe 

Wrong behavior of Advanced URL filter

Dear experts,

Here is my question:

Our customer has registered new URL domains and configured the firewall to block all newly registered domains via the URL filtering configuration. They noticed that the new domain is NOT blocked right away but abo

reverse TCP shells and other potential backdoor connections

Hi Team,

Just one of our customer received an security query points where they wanted the firewall to block reverse TCP shells and other potential backdoor connections.

For backdoor i have went through the backdoor signatures in threat vault.

So we ha

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

It is suggested to upgrade to version 10.2.12-h2 to remediate the vulnerability. However, the firmware version 10.2.12-h2 is currently in monitoring status. It is also mentioned that the same fix is available in version 10.2.10-h9, which is the prefe

Edit/add an asset in IOT Security without any fields

Good morning,
I would like to know if there is a way to leave a field blank when editing an asset. For example, when I change the information of an asset that has been detected wrongly, it does not allow me to leave the OS Family section blank. Is the

False Positive

Hello,

Please fix false positive detection: 

https://www.virustotal.com/gui/file/5259f523e41ffa42af0753df4c020f911a585b311c3267f17703c14920a352b8?nocache=1

Thank you!

Open port 9339 - CVE-2016-2183

Hi,

After the update PA to version 11.1.0 (currently we are using version 11.1.1 but the problem still exists), Nessus discovered open TCP port 9339 and alerted about vulnerability SWEET32 (screen attached below).

It is weird, because port 9339 is u

Cortex XDR agent alert logs missing to cortex manager

didn't received any incident alert logs from cortex xdr agent to cortex manager. 
using cortex broker version 25.0.44 and cortex agent version 8.5

Cortex XDR Notification customization

Hello,
I was wondering, is it possible to customize out of the box Cortex XDR notifications?
They are good and informative, but I would like to see tenant name in incident e-mail notification.
My work involves multiple tenants, and when I receive incide