Introducing the Config Memory Usage Approaching Max Limits alert that triggers when the configuration size on the firewall is close to reaching the maximum limit of config memory usage. During the commit process, a dedicated amount of memory is allocated. During Phase 1 and Phase 2 of the commit process, both the current config and the 'to-be-used' config are stored in memory. Exceeding 50% of VSYS Config Allocator Usage can lead to a commit failure due to insufficient config memory. With this alert, you can take remediation action to prevent a commit failure, which can ultimately lead to an HA Failover.

Supported on Strata Cloud Manager with AIOps for NGFW Premium license.

Introducing the ACC Query Failure alert that detects the failure of the Application Command Center (ACC) query. This failure can impede real-time visibility into network activity, which can compromise the ability to make informed decisions and respond effectively to security incidents.

Supported on Strata Cloud Manager with AIOps for NGFW Premium license.

Introducing the Approaching Max Capacity alert for URLs or IPs within EDLs alert that triggers when the number of URLs, IPs, or Domains in the External Dynamic Lists (EDLs) used in the firewall policy approaches the maximum capacity supported by the firewall. If the capacity limit is reached, the network could become vulnerable to attacks because the firewall won't detect any additional malicious URLs, IPs, or Domains. To mitigate this risk, remove unnecessary or unused entries from the EDLs to reduce the entries and eliminate vulnerabilities.

Supported on Strata Cloud Manager with AIOps for NGFW Premium license.

Introducing the PAN-OS Integrated User-ID Agent Monitored Server Disconnected alert, which detects when the server, monitored by the PAN-OS integrated User-ID agent (Agentless User-ID), loses connection with the firewall. This monitored server is a critical component for mapping user identities to network activities. The loss of connectivity between the firewall and the monitored server by the PAN-OS integrated user-ID agent results in the loss of real-time user identification data and compromises security monitoring capabilities. This situation poses potential risks to network integrity and access control measures.

Supported on Strata Cloud Manager with AIOps for NGFW Premium license.

With Advanced DNS Security license, you can now view the list of hijacked domains and non-resolvable domains associated with the user specified public-facing parent domain(s) in the DNS Security dashboard. For each entry, there is a reason for this categorization and a traffic hit count based on the source IP. Learn how to enable Advanced DNS Security.