topic Re: web-browsing application basic question in General Topics

web-browsing application basic question

LCMember1381 — Thu, 05 Jan 2012 14:47:56 GMT

Hello.

I have PANOS 4.1

Can somebody explain to me why when i permit folowing applications (clearspace, flash, ftp, google-maps, google-translate, ssl, web-browsing) on application-default serwice in policy from zone trust to untrust in rule1 the youtube-base is also permited on the same rule (seen in logs as permited on that rule) ? shouldn't it have been blocked ?

And for excample google-maps i have to permit explicity to work.

Both youtube-base and google-map are web-browser dependent (ssl for google map has ben permited too) ?

Re: web-browsing application basic question

rmonvon — Thu, 05 Jan 2012 17:01:15 GMT

Hi...Did you test by visiting youtube and request some contents? Do you get block or allow and what shows up in the traffic log?

Thanks.

Re: web-browsing application basic question

LCMember1381 — Wed, 11 Jan 2012 13:07:56 GMT

Yes i have tryied to open video on youtube. Access to youtube in log is recordised as "youtube-base". ANd the rule that do not explicity permit the "youtube-base" only web-browsing and flash and some others but not youtube-base.

Re: web-browsing application basic question

mikand — Wed, 11 Jan 2012 19:47:04 GMT

Since you have limited amount of rules I would try going through the applications one by one to see which one it is thats also allowing youtube.

A guess is that "web-browsing" is the general app for all kind of browserbased browsing which means that youtube and others are "included" within this app.

Re: web-browsing application basic question

rmonvon — Wed, 11 Jan 2012 20:17:50 GMT

I would suggest that you contact Support and have your rules reviewed. Thanks.