topic Re: how to block a email sender in paloalto firewall in General Topics

how to block a email sender in paloalto firewall

Marsooq-Akkaradathil — Tue, 05 May 2020 10:44:34 GMT

Hi ,

is it possible to block a sender of email in paloalto firewall eg abc@xyz.com

Thank you,

Re: how to block a email sender in paloalto firewall

kiwi — Tue, 05 May 2020 12:52:10 GMT

If the email address is visible in the traffic's payload then you should be able to create a custom signature that matches the email address and block the traffic ... you'll might have to decrypt traffic though.

That said, could you please elaborate on what exactly you're trying to achieve ? Block 1 specific address/domain/email service ?

Thanks,

-Kiwi.

Re: how to block a email sender in paloalto firewall

Marsooq-Akkaradathil — Tue, 05 May 2020 12:56:35 GMT

Hi @kiwi

i want to block one email address eg: sales@abc.com as this email containing phishing urls. so i need to block the sender.

can you explain how to block this email address and also the domain itself