<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: False positive High-Risk classification for legitimate healthcare SaaS (gmedic.co) in Next-Generation Firewall Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/false-positive-high-risk-classification-for-legitimate/m-p/1254096#M6927</link>
    <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/1566120575"&gt;@gersonjohan&lt;/a&gt;&amp;nbsp;,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P data-path-to-node="4"&gt;Thank you for reaching out.&lt;/P&gt;
&lt;P data-path-to-node="4"&gt;&amp;nbsp;&lt;/P&gt;
&lt;P data-path-to-node="5"&gt;Please note that &lt;STRONG data-index-in-node="17" data-path-to-node="5"&gt;LIVEcommunity is a peer-to-peer forum&lt;/STRONG&gt; and we do not have the ability to manually adjust domain risk scores here.&lt;/P&gt;
&lt;P data-path-to-node="5"&gt;To have your domain reviewed and the 'High-Risk' flag reassessed by PANWs URL Filtering researchers, you must submit a formal request through our official portal:&lt;/P&gt;
&lt;P data-path-to-node="6"&gt;&lt;STRONG data-index-in-node="0" data-path-to-node="6"&gt;&lt;A class="ng-star-inserted" href="https://urlfiltering.paloaltonetworks.com/" target="_blank" rel="noopener"&gt;Palo Alto Networks Test A Site&lt;/A&gt;&lt;/STRONG&gt;&lt;/P&gt;
&lt;P data-path-to-node="7"&gt;&amp;nbsp;&lt;/P&gt;
&lt;P data-path-to-node="7"&gt;&amp;nbsp;&lt;/P&gt;
&lt;OL start="1" data-path-to-node="8"&gt;
&lt;LI&gt;
&lt;P data-path-to-node="8,0,0"&gt;Enter your URL (&lt;CODE data-index-in-node="16" data-path-to-node="8,0,0"&gt;&lt;A href="https://gmedic.co" target="_blank"&gt;https://gmedic.co&lt;/A&gt;&lt;/CODE&gt;).&lt;/P&gt;
&lt;/LI&gt;
&lt;LI&gt;
&lt;P data-path-to-node="8,1,0"&gt;Once the current category and risk appear, click on &lt;STRONG data-index-in-node="52" data-path-to-node="8,1,0"&gt;"Request Change."&lt;/STRONG&gt;&lt;/P&gt;
&lt;/LI&gt;
&lt;LI&gt;
&lt;P data-path-to-node="8,2,0"&gt;In the comments section, I recommend including the points you mentioned above (specifically that this is a Healthcare SaaS platform and your clean reverse IP/hosting status).&lt;/P&gt;
&lt;/LI&gt;
&lt;/OL&gt;
&lt;P data-path-to-node="9"&gt;Once submitted, the PAN-DB team reviews these requests. This is the only way to ensure the automated risk score is updated across the global database.&lt;/P&gt;
&lt;P data-path-to-node="9"&gt;&amp;nbsp;&lt;/P&gt;
&lt;P data-path-to-node="9"&gt;Kind regards,&lt;/P&gt;</description>
    <pubDate>Fri, 15 May 2026 09:34:53 GMT</pubDate>
    <dc:creator>kiwi</dc:creator>
    <dc:date>2026-05-15T09:34:53Z</dc:date>
    <item>
      <title>False positive High-Risk classification for legitimate healthcare SaaS (gmedic.co)</title>
      <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/false-positive-high-risk-classification-for-legitimate/m-p/1253975#M6924</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;&lt;A href="https://gmedic.co" target="_blank" rel="noopener"&gt;https://gmedic.co&lt;/A&gt; is a legitimate healthcare SaaS platform used by healthcare professionals in Colombia.&lt;/P&gt;
&lt;P&gt;The domain is correctly categorized as Health-and-Medicine, however it is currently flagged as High-Risk.&lt;/P&gt;
&lt;P&gt;We already verified:&lt;BR /&gt;- no malicious content&lt;BR /&gt;- no phishing&lt;BR /&gt;- no malware&lt;BR /&gt;- clean reverse IP&lt;BR /&gt;- dedicated legitimate hosting&lt;/P&gt;
&lt;P&gt;The issue seems related to ASN/IP reputation or an automated false positive.&lt;/P&gt;
&lt;P&gt;Could someone from PAN-DB / URL Filtering team review this domain manually?&lt;/P&gt;
&lt;P&gt;Thank you.&lt;BR /&gt;Gerson Samaniego&lt;BR /&gt;CEO &amp;amp; Lead Developer&lt;BR /&gt;&lt;A href="https://www.linkedin.com/in/gerson-samaniego/" target="_blank" rel="noopener"&gt;https://www.linkedin.com/in/gerson-samaniego/&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 14 May 2026 00:21:53 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/next-generation-firewall/false-positive-high-risk-classification-for-legitimate/m-p/1253975#M6924</guid>
      <dc:creator>gersonjohan</dc:creator>
      <dc:date>2026-05-14T00:21:53Z</dc:date>
    </item>
    <item>
      <title>Re: False positive High-Risk classification for legitimate healthcare SaaS (gmedic.co)</title>
      <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/false-positive-high-risk-classification-for-legitimate/m-p/1254096#M6927</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/1566120575"&gt;@gersonjohan&lt;/a&gt;&amp;nbsp;,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P data-path-to-node="4"&gt;Thank you for reaching out.&lt;/P&gt;
&lt;P data-path-to-node="4"&gt;&amp;nbsp;&lt;/P&gt;
&lt;P data-path-to-node="5"&gt;Please note that &lt;STRONG data-index-in-node="17" data-path-to-node="5"&gt;LIVEcommunity is a peer-to-peer forum&lt;/STRONG&gt; and we do not have the ability to manually adjust domain risk scores here.&lt;/P&gt;
&lt;P data-path-to-node="5"&gt;To have your domain reviewed and the 'High-Risk' flag reassessed by PANWs URL Filtering researchers, you must submit a formal request through our official portal:&lt;/P&gt;
&lt;P data-path-to-node="6"&gt;&lt;STRONG data-index-in-node="0" data-path-to-node="6"&gt;&lt;A class="ng-star-inserted" href="https://urlfiltering.paloaltonetworks.com/" target="_blank" rel="noopener"&gt;Palo Alto Networks Test A Site&lt;/A&gt;&lt;/STRONG&gt;&lt;/P&gt;
&lt;P data-path-to-node="7"&gt;&amp;nbsp;&lt;/P&gt;
&lt;P data-path-to-node="7"&gt;&amp;nbsp;&lt;/P&gt;
&lt;OL start="1" data-path-to-node="8"&gt;
&lt;LI&gt;
&lt;P data-path-to-node="8,0,0"&gt;Enter your URL (&lt;CODE data-index-in-node="16" data-path-to-node="8,0,0"&gt;&lt;A href="https://gmedic.co" target="_blank"&gt;https://gmedic.co&lt;/A&gt;&lt;/CODE&gt;).&lt;/P&gt;
&lt;/LI&gt;
&lt;LI&gt;
&lt;P data-path-to-node="8,1,0"&gt;Once the current category and risk appear, click on &lt;STRONG data-index-in-node="52" data-path-to-node="8,1,0"&gt;"Request Change."&lt;/STRONG&gt;&lt;/P&gt;
&lt;/LI&gt;
&lt;LI&gt;
&lt;P data-path-to-node="8,2,0"&gt;In the comments section, I recommend including the points you mentioned above (specifically that this is a Healthcare SaaS platform and your clean reverse IP/hosting status).&lt;/P&gt;
&lt;/LI&gt;
&lt;/OL&gt;
&lt;P data-path-to-node="9"&gt;Once submitted, the PAN-DB team reviews these requests. This is the only way to ensure the automated risk score is updated across the global database.&lt;/P&gt;
&lt;P data-path-to-node="9"&gt;&amp;nbsp;&lt;/P&gt;
&lt;P data-path-to-node="9"&gt;Kind regards,&lt;/P&gt;</description>
      <pubDate>Fri, 15 May 2026 09:34:53 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/next-generation-firewall/false-positive-high-risk-classification-for-legitimate/m-p/1254096#M6927</guid>
      <dc:creator>kiwi</dc:creator>
      <dc:date>2026-05-15T09:34:53Z</dc:date>
    </item>
  </channel>
</rss>

