topic Re: Has there been any recent change from Palo side in regards to blocking traffic to AWS Services such as Sagemaker and Bedrock? in Next-Generation Firewall Discussions

Has there been any recent change from Palo side in regards to blocking traffic to AWS Services such as Sagemaker and Bedrock?

lavatechno — Fri, 24 May 2024 22:53:25 GMT

My customers has observed that all of a sudden they were unable to access AWS Sagemaker service from their AWS console. Observed that that firewall was blocking this traffic and customer has to add application "amazon-sagemaker" explicitly in their configuration for it to work. There was no change from their end. Has there any changes from Palo side which caused this issue?

Re: Has there been any recent change from Palo side in regards to blocking traffic to AWS Services such as Sagemaker and Bedrock?

PavelK — Sun, 26 May 2024 07:06:42 GMT

Hello @lavatechno

Palo Alto has released in content update: 8852-8753 Applications Content Release Notes several new App-IDs. Amazon-bedrock and amazon-sagemaker were among them. Both of them were previously identified as amazon-aws-console, ssl, web-browsing, therefore this has likely cased the issue you described after Firewall has installed this content update.

Kind Regards

Pavel