topic Need help determining why something is blocked. in General Topics

Need help determining why something is blocked.

dsmall — Thu, 02 Aug 2018 17:02:56 GMT

I am getting the following items blocked, but I can't tell why. I am not blocking the games category with my URL filtering.

I also can't find a way to specifically allow Microsoft PE file transfers. I have also tried whitelisting the site, but nothing I do will allow this.

Sorry I'm new to Paloaltos but it seems like it should be easier to determine what rule denied this, and why. I've been through and passed the PCE and PSE training, but there was very little in those videos about the care and feeding of a Palo firewall. Are there any good videos out there about how to respond to something that is permitted but shouldn't be, or is denied but shouldn't be.

Thanks for any help

Re: Need help determining why something is blocked.

JoeAndreini — Thu, 02 Aug 2018 17:36:46 GMT

Is there any sort of file blocking or threat/virus/spyware profile on the policy that would normally allow this connection?

which log is this snippet from? what are teh headings on the columns?

Re: Need help determining why something is blocked.

OtakarKlier — Thu, 02 Aug 2018 18:58:37 GMT

Hello,

If you could click on the magnifying glass on the left of hte log and provide us with a redacted screen shot of it?

Regards,

Re: Need help determining why something is blocked.

dsmall — Thu, 02 Aug 2018 19:12:57 GMT

This is from the Data Filtering Log. Thanks for relpying Joe, but I think I found it. I had the wrong file blocking policy applied.