In this scenario with Palo Alto Networks Advanced Threat Prevention, I did not get any opportunity to work on it. The only thing I did was forward the logs to the SIEM solution.For government entities, they are not allowing configuration changes. For non-government users, there is a support portal to get the configuration file and upload it to the portal. We can identify misconfigurations and where the loop is very big, so we can get the report and establish it. In Saudi Arabia specifically, the support service needs improvement. When customers have incidents with Palo Alto Networks Advanced Threat Prevention and want to open a case with the Palo Alto team, the available number in Saudi Arabia leads to a long procedure. They're not able to answer within one or two hours. This needs to be implemented. They may need to open offices in Dubai or other places for Arabic-speaking people to access TAC support.
