https://live.paloaltonetworks.com/t5/advanced-threat-prevention/alert-on-domain-fronting-attempt/m-p/586163#M2213 <P>Hello,</P> <P>Does someone already tried to simulate a domain fronting attack to see if the firewall correctly identify it ?</P> <P>I have tried on a PANOS 10.1 FW. It correctly see the host in header and apply URL filtering policy to it but do not alert in threat log even if I have enable alert on all threat.</P> <P>regards,</P> <P>Cedric</P> Wed, 08 May 2024 11:56:34 GMT Cedricd 2024-05-08T11:56:34Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/alert-on-domain-fronting-attempt/m-p/586163#M2213 <P>Hello,</P> <P>Does someone already tried to simulate a domain fronting attack to see if the firewall correctly identify it ?</P> <P>I have tried on a PANOS 10.1 FW. It correctly see the host in header and apply URL filtering policy to it but do not alert in threat log even if I have enable alert on all threat.</P> <P>regards,</P> <P>Cedric</P> Wed, 08 May 2024 11:56:34 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/alert-on-domain-fronting-attempt/m-p/586163#M2213 Cedricd 2024-05-08T11:56:34Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/alert-on-domain-fronting-attempt/m-p/588468#M2230 <P>I have contacted support and this threat is indeed only supported on PAN-OS 10.2.1 and later.</P> Fri, 31 May 2024 08:31:00 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/alert-on-domain-fronting-attempt/m-p/588468#M2230 Cedricd 2024-05-31T08:31:00Z