topic Re: Today I had 2 cases opened for the same problem 179616 and179728 in General Topics

Today I had 2 cases opened for the same problem 179616 and179728

larry_cox2 — Wed, 18 Dec 2013 22:22:00 GMT

I would like to have further discussion on this it seems that we now have a very broad policy at the top of our blocking list which contradicts the first rule of firewalls.

Re: Today I had 2 cases opened for the same problem 179616 and179728

ericgearhart — Wed, 18 Dec 2013 22:42:06 GMT

Larry on the discussion board "us users" have no idea what is in the contents of the two tickets you have open... would you care to describe the tickets you have open? Otherwise the community of PA users can't really be of any help honestly...

Re: Today I had 2 cases opened for the same problem 179616 and179728

jteetsel — Thu, 19 Dec 2013 00:34:43 GMT

Hi Larry, I've taken a look at the cases in question. It appears that the traffic was being blocked because there was no policy in place to allow this traffic. The reason the engineers added 'any' to the application list on the policy is so that you can identify which applications you need to allow. You will see the type of traffic (which applications) are hitting this policy in the traffic log. Once you identify and decide which applications you want to allow you can then update the policy at the top to allow only those applications rather than 'any'. Anything else will hit the deny rule.