<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: KAKAO TALK APP issue in Next-Generation Firewall Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/kakao-talk-app-issue/m-p/1236533#M6238</link>
    <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/259684"&gt;@weezy&lt;/a&gt;,&lt;/P&gt;
&lt;P&gt;I have no experience with this application, but it sounds like something on your network is blocking the required application traffic. General questions:&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;Do you decrypt traffic?&lt;/LI&gt;
&lt;LI&gt;Have you attempted to allow all traffic externally on a test client and see if the application works if it has an open security rulebase entry temporarily?&lt;/LI&gt;
&lt;LI&gt;If that doesn't work and you are decrypting traffic; attempt the same thing but this time adding a decryption exclusion.&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Some applications will utilize certificate pinning and you simply can't decrypt them and expect the application to actually work. It could be that KakaoTalk has implemented certificate pinning in their application and you getting in the way of that is breaking the application. You would need to determine if the user's ability to utilize this application when on your network justifies an exclusion.&lt;/P&gt;
&lt;P&gt;Assuming that you aren't decrypting traffic, then you are likely not fully accounting for all necessary network traffic. You will need to utilize a test endpoint and actually identify all requirements to build out the policy needed to facilitate allowing the network traffic. If you're limiting the application to IP addresses assigned to the company it is&amp;nbsp;&lt;EM&gt;likely&amp;nbsp;&lt;/EM&gt;that you are blocking some of the application traffic that just doesn't go to directly allocated addresses.&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Sat, 23 Aug 2025 03:49:03 GMT</pubDate>
    <dc:creator>BPry</dc:creator>
    <dc:date>2025-08-23T03:49:03Z</dc:date>
    <item>
      <title>KAKAO TALK APP issue</title>
      <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/kakao-talk-app-issue/m-p/1236401#M6231</link>
      <description>&lt;P&gt;Hi All,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Does anyone here encountered an issue on kakao talk app? A south Korean messaging app.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;We have south korean users on our malaysia site that uses this app. When the user tries to login using their own hotspot they can connect without any issues, but when user is connected on our wifi, the user tries to login and was getting an error 50101, LL&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;This is working since last year and the user complain it suddenly stop.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;1. we already allowed the kakao talk app on our allowed app list.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;2. This is the list of their public IP info&amp;nbsp;&lt;SPAN data-teams="true"&gt;&lt;A id="menur14r" class="fui-Link ___1q1shib f2hkw1w f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1s184ao f1mk8lai fnbmjn9 f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh fhgqx19 f1olyrje f1p93eir f1nev41a f1h8hb77 f1lqvz6u f10aw75t fsle3fq f17ae5zn" title="https://ipinfo.io/as9764" href="https://ipinfo.io/AS9764" target="_blank" rel="noreferrer noopener" aria-label="Link AS9764 Kakao Corp details - IPinfo.io"&gt;AS9764 Kakao Corp details - IPinfo.io&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;This is the list of public IP's of kakao talk that I allowed on our PA 850&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN data-teams="true"&gt;203.217.230.241&lt;BR /&gt;203.217.236.8&lt;BR /&gt;203.133.166.18&lt;BR /&gt;203.217.238.9&lt;BR /&gt;203.133.167.14&lt;BR /&gt;203.217.239.58&lt;BR /&gt;113.29.190.178&lt;BR /&gt;113.29.189.165&lt;BR /&gt;203.133.172.4&lt;BR /&gt;203.217.226.4&lt;BR /&gt;203.217.231.74&lt;BR /&gt;113.29.191.220&lt;BR /&gt;203.133.165.241&lt;BR /&gt;211.183.219.26&lt;BR /&gt;113.29.179.43&lt;BR /&gt;211.183.218.4&lt;BR /&gt;203.133.160.220&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN data-teams="true"&gt;3. When I check the policy the hit counts I'm seeing the kakao talk app file transfer&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="weezy_0-1755758050671.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/68957i9A81571B8E44502E/image-size/medium?v=v2&amp;amp;px=400" role="button" title="weezy_0-1755758050671.png" alt="weezy_0-1755758050671.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;4. The system admins had allowed this app as well on the windows laptop so the user should be able to use it without any issues.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;5. I ask her to reach out to kakao support team to ask what is their public IP and the Kakao support told her that they cannot share their public IP details&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;This is the error they are getting and also the solution that server team suggested to put the installer on windows drive then install it, still don't work. The Local I.T installed as well the latest ver and reinstalled it still don't work.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="weezy_1-1755758329477.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/68958iCF445404B0DE6F33/image-size/medium?v=v2&amp;amp;px=400" role="button" title="weezy_1-1755758329477.png" alt="weezy_1-1755758329477.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;All the troubleshooting steps and the full details about the APP are mentioned.&lt;/P&gt;</description>
      <pubDate>Thu, 21 Aug 2025 06:40:26 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/next-generation-firewall/kakao-talk-app-issue/m-p/1236401#M6231</guid>
      <dc:creator>weezy</dc:creator>
      <dc:date>2025-08-21T06:40:26Z</dc:date>
    </item>
    <item>
      <title>Re: KAKAO TALK APP issue</title>
      <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/kakao-talk-app-issue/m-p/1236533#M6238</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/259684"&gt;@weezy&lt;/a&gt;,&lt;/P&gt;
&lt;P&gt;I have no experience with this application, but it sounds like something on your network is blocking the required application traffic. General questions:&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;Do you decrypt traffic?&lt;/LI&gt;
&lt;LI&gt;Have you attempted to allow all traffic externally on a test client and see if the application works if it has an open security rulebase entry temporarily?&lt;/LI&gt;
&lt;LI&gt;If that doesn't work and you are decrypting traffic; attempt the same thing but this time adding a decryption exclusion.&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Some applications will utilize certificate pinning and you simply can't decrypt them and expect the application to actually work. It could be that KakaoTalk has implemented certificate pinning in their application and you getting in the way of that is breaking the application. You would need to determine if the user's ability to utilize this application when on your network justifies an exclusion.&lt;/P&gt;
&lt;P&gt;Assuming that you aren't decrypting traffic, then you are likely not fully accounting for all necessary network traffic. You will need to utilize a test endpoint and actually identify all requirements to build out the policy needed to facilitate allowing the network traffic. If you're limiting the application to IP addresses assigned to the company it is&amp;nbsp;&lt;EM&gt;likely&amp;nbsp;&lt;/EM&gt;that you are blocking some of the application traffic that just doesn't go to directly allocated addresses.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sat, 23 Aug 2025 03:49:03 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/next-generation-firewall/kakao-talk-app-issue/m-p/1236533#M6238</guid>
      <dc:creator>BPry</dc:creator>
      <dc:date>2025-08-23T03:49:03Z</dc:date>
    </item>
    <item>
      <title>Re: KAKAO TALK APP issue</title>
      <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/kakao-talk-app-issue/m-p/1236659#M6240</link>
      <description>&lt;P&gt;Hi ,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;We don't decrypt. I created a specific security policy that will allow the IP addresses and the application. I did see a hit count but it doesn't see the apps.&lt;/P&gt;</description>
      <pubDate>Tue, 26 Aug 2025 02:39:15 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/next-generation-firewall/kakao-talk-app-issue/m-p/1236659#M6240</guid>
      <dc:creator>weezy</dc:creator>
      <dc:date>2025-08-26T02:39:15Z</dc:date>
    </item>
    <item>
      <title>Re: KAKAO TALK APP issue</title>
      <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/kakao-talk-app-issue/m-p/1239048#M6350</link>
      <description>&lt;P&gt;Hi ,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;We don't decrypt. I created a specific security policy that will allow the IP addresses and the application. I did see a hit count but it doesn't see the apps.&lt;/P&gt;</description>
      <pubDate>Tue, 30 Sep 2025 01:40:55 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/next-generation-firewall/kakao-talk-app-issue/m-p/1239048#M6350</guid>
      <dc:creator>weezy</dc:creator>
      <dc:date>2025-09-30T01:40:55Z</dc:date>
    </item>
  </channel>
</rss>

