topic Re: Allow SSH outbound, block SSH tunneling. in General Topics

Allow SSH outbound, block SSH tunneling.

SoftwareMedia — Mon, 18 Jan 2010 19:13:53 GMT

Is it possible to allow SSH out but block SSH tunneling?

Re: Allow SSH outbound, block SSH tunneling.

nrice — Tue, 19 Jan 2010 00:12:46 GMT

Hello,

The PAN does not differentiate between regular SSH traffic and SSH tunneling so there would be no way to allow SSH and block SSH tunneling.

Re: Allow SSH outbound, block SSH tunneling.

mderksen — Tue, 19 Jan 2010 09:04:17 GMT

But that does not mean that we will not look into this. The idea is that we will support this functionality in a future release.

Re: Allow SSH outbound, block SSH tunneling.

SoftwareMedia — Tue, 19 Jan 2010 22:43:27 GMT

It would be an amazingly helpful feature. Any ballpark ETA for when we might expect it to show up?

Re: Allow SSH outbound, block SSH tunneling.

mjacobsen — Tue, 19 Jan 2010 22:54:40 GMT

This is something we are actively investigating but we don't have a firm date for delivery at this point.

Mike

Re: Allow SSH outbound, block SSH tunneling.

SoftwareMedia — Wed, 20 Jan 2010 00:05:56 GMT

Awwww.... that makes me sad. It is great to hear you are actively working on it. It is, without question, something that will be tricky to pull off. Gives me something to look forward to playing with though. It is features like this that really set Palo Alto apart from the competition. Keep up the great work!

Re: Allow SSH outbound, block SSH tunneling.

migration — Wed, 03 Nov 2010 14:55:26 GMT

ssh-tunnel signature released (versione 215)...from PAN OS 4.0!

Well done boys!!