App blocking

[Satish]

Hi Friends,

is this possible to block facebook, gtalk, if i don't have URL filtering license, If yes then how please explain.

Regards

Satish

[HULK]

Hello Satish,

You can block traffic according to Application i.e facebook, gtalk .

Thanks

[HULK]

Palo ALto firewall is having multiple layer of security, if you do not have a valid URL filtering license, you may configure a security policy base on application to block facebook and gtalk traffic.

Hope this helps.

Thanks

[Satish]

Hi Hulk Bro,

Thanks for your reply. i have already done this but still i m able to access the youtube, gtalk , facebook etc and my network diagram attached plz suggest .

[_slv_]

Hi Hulk

Are You sure that this is enought?

I mean is is possible to block such aplication without SSL decryptions on PA?

For example, if aps need ssl to be properly identyfied, and You allow ssl on this security rule or any other that is processed before IMHO this traffic will flow.

Please correct me if I'm wrong.

Regards

Slawek

[HULK]

Hello Slv,

For all predefined applications, you need not to have a decryption in place. The Palo Alto should automatically detect the signature and you have to allow it's dependent application.

Thanks

[emr_1]

Hi HULK and slv,

FYI:

I found following doc: Which App ID's Require Decryption?

This includes facebook and other features related to facebook (w/o facebook-base)

On the other hand, I tested with my PA-5020 which does not have decrypt rule, and confirmed that I can see 'facebook-base' without decryption.

Regards,