https://live.paloaltonetworks.com/t5/general-topics/unable-to-block-https-from-untrust-zone/m-p/393276#M91000 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/167254">@Vijaygvasan</a>,</P> <P>Are you decrypting the traffic so the firewall can actually read more than the SNI? If you look at the traffic does your block match the recorded SNI?&nbsp;</P> Wed, 24 Mar 2021 13:21:24 GMT BPry 2021-03-24T13:21:24Z https://live.paloaltonetworks.com/t5/general-topics/unable-to-block-https-from-untrust-zone/m-p/393161#M90987 <P>Hi guys,</P><P>&nbsp;</P><P>I have a query were im not able to block https traffic for a specific domains subdomain to be blocked. Where i have created a url catagory and mapped it with url filtering and called that in a security policy.</P><P>But as i see that the http is getting blocked as a descriptive value as threat and the https is getting allowed for the same set of url category even after mentioning them in block catagory.</P><P>&nbsp;</P><P>Put me up with some ideas how to take it forward.</P><P>my query is how to block https traffic for a specific website url which is inside the organization from untrust zone to trust zone?</P> Wed, 24 Mar 2021 05:11:31 GMT https://live.paloaltonetworks.com/t5/general-topics/unable-to-block-https-from-untrust-zone/m-p/393161#M90987 Vijaygvasan 2021-03-24T05:11:31Z https://live.paloaltonetworks.com/t5/general-topics/unable-to-block-https-from-untrust-zone/m-p/393276#M91000 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/167254">@Vijaygvasan</a>,</P> <P>Are you decrypting the traffic so the firewall can actually read more than the SNI? If you look at the traffic does your block match the recorded SNI?&nbsp;</P> Wed, 24 Mar 2021 13:21:24 GMT https://live.paloaltonetworks.com/t5/general-topics/unable-to-block-https-from-untrust-zone/m-p/393276#M91000 BPry 2021-03-24T13:21:24Z