topic Re: security policy order not working. in General Topics

security policy order not working.

inderjit21 — Thu, 25 Aug 2016 03:53:35 GMT

I have a policy from trust to untrust any any allowed. I have cloned this policy and put on top of this with address -test and deny 2 applications. This address is an ip for eg. 192.168.1.26 which is reserved in dhcp. But I can see apps being access via any any policy. Should the address be blocked using block policy.

Re: security policy order not working.

TranceforLife — Thu, 25 Aug 2016 06:18:51 GMT

Hi,

Most likely not all conditions were met in the 1st policy, so traffic passed through the any any.

Did you check detailed logs from any any to see why it didn't match 1st policy ( sorce ip, destination , postrs, )?

Thx,

Myky

Re: security policy order not working.

BPry — Thu, 25 Aug 2016 15:27:32 GMT

Is this a web applicaion and do you use SSL decyrption? If you are not using SSL decyption and are attempting to block two app-ids it's pretty common for this to not actually work.