topic Re: bypassed PAN box using free proxies in General Topics

bypassed PAN box using free proxies

usvi — Tue, 30 Aug 2011 23:19:42 GMT

We are tested PAN 500 NFR in our lab . Did a search for youtube proxy on google and picked the first listed . Used them and bypassed the PAN box and was able to get to facebook and yahoo mail . I couldn't get to these sites through my browser directly . I am sure there are others, people can also use . I thought PAN prevented such circumvention of policies . Guess , I am wrong .

Re: bypassed PAN box using free proxies

kbrazil — Tue, 30 Aug 2011 23:54:40 GMT

Hi there,

How is the application being identified in the logs? If it is an application that is already in the App-ID database and it is not being identified correctly, then a support case should be opened. If the app is not yet covered you can submit the app to the Application and Threat Research Center:

http://www.paloaltonetworks.com/researchcenter/submit-an-application/

Cheers,

Kelly

Re: bypassed PAN box using free proxies

usvi — Wed, 31 Aug 2011 03:08:38 GMT

Hello,

It is not being reported as an app rather web browsing . Big let down . This is one of the marketing put in front of partners by PAN . Thank God , we tested this inhouse rather than infornt of a prospect .

Re: bypassed PAN box using free proxies

kbrazil — Wed, 31 Aug 2011 04:22:47 GMT

There are new proxy apps coming out all the time. Please submit the application via the site so we can write a signature. App-ID allows a single signature to cover 'families' of proxy avoidance applications. (i.e. php-proxy) This is much more effective than URL filtering, but it can also be a cat and mouse game as new proxy apps come out.

Cheers,

Kelly

Re: bypassed PAN box using free proxies

jleung — Wed, 31 Aug 2011 17:05:43 GMT

Hi Roland,

I have tried it and actually that is a proxy runing in https and is just simply a web traffic helping you to proxy traffic. If you also have our URL filtering solution, you can see that actually it is in proxy-avoidance-and-anonymizers category for a while already.

In App-ID, we have some common client-server proxy app, but for browser based proxy, it is better to use URL filtering solution- as there is more than thousands of proxy bypass website in the world.

Controlling and enabling user internet access is becoming more challenging nowadays, and usually needs to leverage several areas of technologies to achieve it.