topic Block msn-file-transfer security rule in VWire mode in General Topics

Block msn-file-transfer security rule in VWire mode

johnnywong — Thu, 27 May 2010 06:49:28 GMT

Hi All,

I configured my PA2020 to block msn-file-transfer from any any but it doesn't work. I checked Monitor traffic log already show "Deny" on msn-file-transfer. However, it is successful to transfer a file in msn in my test lab. Below is my rule set of firewall in simple

1. any any msn-file-transfer deny

2. any any any allow

Thanks a lot!

Johnny

Re: Block msn-file-transfer security rule in VWire mode

nrice — Thu, 27 May 2010 23:09:44 GMT

Are you on an older Content version? There was a bug, resolved in Content 180, which prevented msn-file-transfer from being blocked. If you are on a current Content version, you may want to contact Support so that they can troubleshoot the issue with you.

Re: Block msn-file-transfer security rule in VWire mode

johnnywong — Fri, 28 May 2010 02:42:28 GMT

I am using the current version which is 186-631. BTW, Any Any can block msn-file-transfer but not in trust->untrust when I fine tune the policy. It is also show 'deny' in traffic log. Any configuration I miss in the policy?

Thanks!

Johnny

Re: Block msn-file-transfer security rule in VWire mode

swhyte — Fri, 28 May 2010 22:03:39 GMT

Hello Johnny,

it sounds like this may be a bug with our content. Can you call into your support to pursue isolating this?

Also it would be great if you could get a pcap of the msn file transfers that is being let through the paloalto device.

thank you,

Stephen