topic Re: Any good way to block DeepSeek by PaloAlto Firewall(PA-820) in Next-Generation Firewall Discussions

Any good way to block DeepSeek by PaloAlto Firewall(PA-820)

stevelu — Thu, 20 Feb 2025 01:01:45 GMT

Could you tell me a good method to block DeepSeek ? Thank you very much.

Re: Any good way to block DeepSeek by PaloAlto Firewall(PA-820)

Raido_Rattameister — Thu, 20 Feb 2025 13:24:46 GMT

Info from "Applications and Threats Content Release Notes"

https://live.paloaltonetworks.com/t5/customer-resources/new-app-ids-for-deepseek/ta-p/1220674

Re: Any good way to block DeepSeek by PaloAlto Firewall(PA-820)

stevelu — Fri, 21 Feb 2025 02:09:05 GMT

Thank you very much.

Could you let me know if you have any information about the timeline for the availability of the new app ID(deepseek-api,deepseek-chat,deepseek-platform)?

Re: Any good way to block DeepSeek by PaloAlto Firewall(PA-820)

Raido_Rattameister — Fri, 21 Feb 2025 18:49:02 GMT

[Update 2/20/2025] - Due to some minor issues discovered in QA testing we are delaying the previously scheduled February 19, 2025 release to February 24, 2025 Pacific Time Zone.

https://live.paloaltonetworks.com/t5/customer-resources/new-app-ids-for-deepseek/ta-p/1220674

Re: Any good way to block DeepSeek by PaloAlto Firewall(PA-820)

stevelu — Mon, 24 Feb 2025 00:58:43 GMT

Thank you for your response. However, today is already February 24 (UTC+8), and I still have not seen the app ID related to Deepseek available for use during work hours.

Re: Any good way to block DeepSeek by PaloAlto Firewall(PA-820)

stevelu — Wed, 26 Feb 2025 01:51:42 GMT

This morning, on February 26, 2025, I finally found the app ID for Deepseek on PA. However, after setting it up, it didn't work at all, as shown in the attachment. I'm really surprised.

Re: Any good way to block DeepSeek by PaloAlto Firewall(PA-820)

OtakarKlier — Wed, 26 Feb 2025 20:53:44 GMT

Hello,

Also utilize URL filtering and NDS filtering if you can.

Regards,

Re: Any good way to block DeepSeek by PaloAlto Firewall(PA-820)

stevelu — Mon, 03 Mar 2025 06:38:57 GMT

Thanks Sir.

Do you mean that in order to block DeepSeek, it's not enough to just use app-id.

"URL filtering" and "DNS Security" need to be used in combination? Is that correct?