topic App blocking in General Topics

App blocking

Satish — Wed, 23 Jul 2014 13:36:30 GMT

Hi Friends,

is this possible to block facebook, gtalk, if i don't have URL filtering license, If yes then how please explain.

Regards

Satish

Re: App blocking

HULK — Wed, 23 Jul 2014 13:56:07 GMT

Hello Satish,

You can block traffic according to Application i.e facebook, gtalk .

Thanks

Re: App blocking

HULK — Wed, 23 Jul 2014 13:59:32 GMT

Palo ALto firewall is having multiple layer of security, if you do not have a valid URL filtering license, you may configure a security policy base on application to block facebook and gtalk traffic.

Hope this helps.

Thanks

Re: App blocking

Satish — Wed, 23 Jul 2014 16:15:44 GMT

Hi Hulk Bro,

Thanks for your reply. i have already done this but still i m able to access the youtube, gtalk , facebook etc and my network diagram attached plz suggest .

Re: App blocking

_slv_ — Wed, 23 Jul 2014 17:07:49 GMT

Hi Hulk

Are You sure that this is enought?

I mean is is possible to block such aplication without SSL decryptions on PA?

For example, if aps need ssl to be properly identyfied, and You allow ssl on this security rule or any other that is processed before IMHO this traffic will flow.

Please correct me if I'm wrong.

Regards

Slawek

Re: App blocking

HULK — Wed, 23 Jul 2014 18:02:37 GMT

Hello Slv,

For all predefined applications, you need not to have a decryption in place. The Palo Alto should automatically detect the signature and you have to allow it's dependent application.

Thanks

Re: App blocking

emr_1 — Thu, 24 Jul 2014 07:23:45 GMT

Hi HULK and slv,

FYI:

I found following doc: Which App ID's Require Decryption?

This includes facebook and other features related to facebook (w/o facebook-base)

On the other hand, I tested with my PA-5020 which does not have decrypt rule, and confirmed that I can see 'facebook-base' without decryption.

Regards,