Incidents
PA-BF-1440MediumResolvedBenign96%
Brute force on VPN portal – blocked by Prisma Access, benign
Affected: GlobalProtect portalPrisma AccessUpdated 05:20 PT · Owner AI SOC
AI summary
1,912 failed auths from 44 IPs; no successes. All sources on known password-spray lists; blocked by default policy.
Verdict
Benign96%
Customer-approved model · AWS GovCloud (us-gov-west-1) · inside Halcyon's account. Time to verdict 47s.