Azure / Azure/Azure-Sentinel

Palo Alto PAN OS - CEF Format Unsupported After 10.0.x

Open
#14,458 2 comments 0 reactions 3 assignees Claimed by @hassanchawiche View on GitHub
Connector
Dominant language
Python
Stars
6.1k
Forks
3.8k
Avg merge
4d 7h
Merged PRs (30d)
125

Description

Palo Alto has [announced](https://docs.paloaltonetworks.com/resources/cef#:~:text=Palo%20Alto%20Networks%20does%20not,PAN%2DOS%20releases%20after%20PAN%2DOS%2010.0.) that they will [not support CEF after 10.0.x code. "Customers should use standard syslog or other supported logging mechanisms for integrations with newer PAN-OS versions."

This presents a problem as the current PaloAlto-PAN-OS code from the Sentinel Content Hub supports CEF only.

Please consider updating the Content for Palo Alto PAN to use the syslog instead of CEF.

Thanks

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.