<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Unexpected Classification of 443 Traffic as &amp;quot;naver-line&amp;quot; with Subcategory &amp;quot;voip-video in Next-Generation Firewall Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/unexpected-classification-of-443-traffic-as-quot-naver-line-quot/m-p/596696#M3681</link>
    <description>&lt;P&gt;&lt;SPAN&gt;Hi everyone,&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;1) End user has confirmed that these users' computers do not have the LINE application installed. However, the 443 traffic is being identified as "naver-line," with a subcategory of "voip-video." Could you please help us understand the cause of this behavior?&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Suhairul_Salleh_0-1725418752203.jpeg" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61937i4D2F296FB6A354E7/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="Suhairul_Salleh_0-1725418752203.jpeg" alt="Suhairul_Salleh_0-1725418752203.jpeg" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;2)&amp;nbsp;&lt;SPAN&gt;And We noticed in the logs that certain activities are classified as the application "outlook-web-online." Could you please explain how this classification is defined? We want to understand if these activities could be related to Windows or Outlook, as we also have an Exchange Server, and the connected IP addresses are indeed from Microsoft.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Suhairul_Salleh_1-1725418788784.jpeg" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61938i2EC17D0817ED6A9A/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="Suhairul_Salleh_1-1725418788784.jpeg" alt="Suhairul_Salleh_1-1725418788784.jpeg" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Appreciate your help.&lt;/SPAN&gt;&lt;/P&gt;</description>
    <pubDate>Wed, 04 Sep 2024 03:00:14 GMT</pubDate>
    <dc:creator>Suhairul_Salleh</dc:creator>
    <dc:date>2024-09-04T03:00:14Z</dc:date>
    <item>
      <title>Unexpected Classification of 443 Traffic as "naver-line" with Subcategory "voip-video</title>
      <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/unexpected-classification-of-443-traffic-as-quot-naver-line-quot/m-p/596696#M3681</link>
      <description>&lt;P&gt;&lt;SPAN&gt;Hi everyone,&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;1) End user has confirmed that these users' computers do not have the LINE application installed. However, the 443 traffic is being identified as "naver-line," with a subcategory of "voip-video." Could you please help us understand the cause of this behavior?&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Suhairul_Salleh_0-1725418752203.jpeg" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61937i4D2F296FB6A354E7/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="Suhairul_Salleh_0-1725418752203.jpeg" alt="Suhairul_Salleh_0-1725418752203.jpeg" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;2)&amp;nbsp;&lt;SPAN&gt;And We noticed in the logs that certain activities are classified as the application "outlook-web-online." Could you please explain how this classification is defined? We want to understand if these activities could be related to Windows or Outlook, as we also have an Exchange Server, and the connected IP addresses are indeed from Microsoft.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Suhairul_Salleh_1-1725418788784.jpeg" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/61938i2EC17D0817ED6A9A/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="Suhairul_Salleh_1-1725418788784.jpeg" alt="Suhairul_Salleh_1-1725418788784.jpeg" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Appreciate your help.&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 04 Sep 2024 03:00:14 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/next-generation-firewall/unexpected-classification-of-443-traffic-as-quot-naver-line-quot/m-p/596696#M3681</guid>
      <dc:creator>Suhairul_Salleh</dc:creator>
      <dc:date>2024-09-04T03:00:14Z</dc:date>
    </item>
  </channel>
</rss>

