how can i block site by category and user group

aldwine — Sat, 28 Jul 2012 02:41:59 GMT

Hi there,

I have some questions regarding on how to block URL category and by user group.

the box is PA-2020 and when I block the social-networking with the source user is by group it wont work.

When i look on the CLI the user group is <XXXX>.org but on the gui of the paloalto under user it only appears different group YYYY.org

box configuration is active-untrust and passive-untrust, set as Vwire.

box has also a proxy server, so they also have a proxy-untrust and proxy-trust, also configured as Vwire.

thanks,

aldwine

Re: how can i block site by category and user group

rmonvon — Sun, 29 Jul 2012 14:11:31 GMT

Are you saying the LDAP user group in the CLI is different than the GUI? If so, I suggest you open a case with support.

You can also check the traffic log to see which rule is matching the user to help isolate the problem. You may want to write a rule to match on the username (instead of LDAP group) to see if that work.

Thanks.

topic how can i block site by category and user group in General Topics

how can i block site by category and user group

Re: how can i block site by category and user group