Using Dynamic Block List - What happens if the Dynamic Block URL is not available?

What happens if the URL for the dynamic block list is not available? Are the entries cached or all IPs allowed?

Thank you.

Embedded Word Templates - Clients on external networks to reject immediately

Hi Guys

Wondering if anyone has any ideas on;

There are external clients / users attempting to open word documents that use word templates stored on the corporate network drive.  When the user is offsite and not connected to Global Protect or VPN and

PA strange behaviour

Hi,

Last night (1.30am) it was a electric cut down in my office. This cutdown didnt affect to our PaloAltos but since this time we are expecting an strange beahviour in our Palo alto. During this morning the FW were flapping and we found one member

DNS tunneling seems it's not recognized as "tcp-over-dns"

Since some weeks, we are suspecting DNS Tunneling usage.
We saw a specific "application" being present on applipedia for this kind of action: tcp-over-dns

Applipedia description states:
"DNS Tunneling is a technique to encapsulate any binary data within

how to block ultrasurf all version

please ...anyone to know how can i block the application ULTRASURF in PA 6.0.7

url filtering flow

The url filterng flow is like below:

data plance -> management plane -> cloud.

I am seeing the category of ome sites is different than test url site of palo alto.

For Ex:

 In Palo alto firewall below command gives this output

show running url xxx

malawa

How to Allow File Downloads from a Specific URL

Hello all,

Is there a way to allow file download/upload from a specific URL? We currently block most file downloads/uploads however we have specific website that users upload and download attachments toover https.

Thank you all for your help!

security policy order not working.

I have a policy from trust to untrust any any allowed. I have cloned this policy and put on top of this with  address -test and deny 2 applications. This address is an ip for eg. 192.168.1.26 which is reserved in dhcp. But I can see apps being access

No direct access to local network

Hi team, 

Good day!
As I have understood, this feature will provide compulsary full tunnel and all my traffic will be set to inspection by firewall. I won't be able to access anything local. 

Can anyone confirm.