Helping Hand Questions for SSE-Engineer

TheStrata Logging Serviceallowslog replay, which enables resending logs that were not successfully forwarded to an external syslog server due to disruptions. By configuring areplay profilewith the affected time range and associating it with thesyslog server profile, Prisma Access will resend the missing logs, ensuring that all relevant data is restored in the external logging system. This approach is the most efficient and automated way to recover missing logs.

InPrisma Access, security policies are evaluated based on theirconfiguration scope. If the engineer configured aSecurity policyunder theRemote Networks scope, but traffic from the branch locations is instead matching aSecurity policy under the Prisma Access configuration scope, the intended policy will not take effect. This happens becausePrisma Access evaluates security rules based on the highest-level applicable configuration first, which can override more specific Remote Networks policies.

When network routers appear multiple times with different IP addresses in IoT Security, it is likely because they have multiple interfaces with separate IPs. Merging these entries into a single device with multiple interfaces ensures that the system correctly identifies each router as a unique entity while maintaining visibility across all its interfaces. This approach prevents unnecessary duplicates, improves asset management, and enhances security monitoring.