<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Zoom phone custom signature thru: ssl-req-chello-sni in Custom Signatures</title>
    <link>https://live.paloaltonetworks.com/t5/custom-signatures/zoom-phone-custom-signature-thru-ssl-req-chello-sni/m-p/588524#M505</link>
    <description>&lt;P&gt;Hi everyone!&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;We are currently moving our phone system to zoom, and we had an issue with the zoom application, some of their traffic its categorized as an incomplete causing that some calls hang out, or don't ring, i downloaded the packet capture log and i saw packets from zoom droping.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I made an application, using the signature ssl-req-chello-sni and pasting the complete server's name that was registred in that drop package, this actually did work, but i wanted to make it dynamic, it's probably that, that specific server changes the name, but it ends with zoom.us,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;If i type *.zoom.us, would work? or what it's the best practice?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Regards.&lt;/P&gt;</description>
    <pubDate>Fri, 31 May 2024 22:13:58 GMT</pubDate>
    <dc:creator>R.Tudon</dc:creator>
    <dc:date>2024-05-31T22:13:58Z</dc:date>
    <item>
      <title>Zoom phone custom signature thru: ssl-req-chello-sni</title>
      <link>https://live.paloaltonetworks.com/t5/custom-signatures/zoom-phone-custom-signature-thru-ssl-req-chello-sni/m-p/588524#M505</link>
      <description>&lt;P&gt;Hi everyone!&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;We are currently moving our phone system to zoom, and we had an issue with the zoom application, some of their traffic its categorized as an incomplete causing that some calls hang out, or don't ring, i downloaded the packet capture log and i saw packets from zoom droping.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I made an application, using the signature ssl-req-chello-sni and pasting the complete server's name that was registred in that drop package, this actually did work, but i wanted to make it dynamic, it's probably that, that specific server changes the name, but it ends with zoom.us,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;If i type *.zoom.us, would work? or what it's the best practice?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Regards.&lt;/P&gt;</description>
      <pubDate>Fri, 31 May 2024 22:13:58 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/custom-signatures/zoom-phone-custom-signature-thru-ssl-req-chello-sni/m-p/588524#M505</guid>
      <dc:creator>R.Tudon</dc:creator>
      <dc:date>2024-05-31T22:13:58Z</dc:date>
    </item>
  </channel>
</rss>

