topic Re: World Cup 2018 in General Topics

World Cup 2018

Ntripp — Tue, 12 Jun 2018 13:24:50 GMT

Anyone have a custom APP-ID to block world cup 2018? or is palo going to release one?

Re: World Cup 2018

LukeBullimore — Tue, 12 Jun 2018 13:37:36 GMT

Very unlikely that an App-ID will be created for this; best way would be to create a custom App-ID

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/app-id/use-application-objects-in-policy/create-a-custom-application#id2c3155f5-7aa9-44dc-a049-1485a971189c

Re: World Cup 2018

BPry — Tue, 12 Jun 2018 15:30:37 GMT

@Ntripp,

This is an ephemeral application and Palo hasn't historically released any signature for this outside of March Madness. You'd have to look at where it's even being streamed and then attempt to block that, however the World Cup is unlike March Madness in the fact that it's actually streamed from a large number of locations offically (ESPN, YouTube, NBC Sports, ex).

Re: World Cup 2018

reaper — Wed, 13 Jun 2018 12:20:21 GMT

@BPry: Hold my beer

Re: World Cup 2018

reaper — Wed, 13 Jun 2018 13:53:04 GMT

@Ntripp Here you go : As everyone is getting ready to watch the World Cup, so should security admins

Re: World Cup 2018

pulukas — Sat, 16 Jun 2018 14:48:49 GMT

Always nice when PA supplies these signatures for major events.

thanks