Block msn-file-transfer security rule in VWire mode

[johnnywong]

Hi All,

I configured my PA2020 to block msn-file-transfer from any any but it doesn't work. I checked Monitor traffic log already show "Deny" on msn-file-transfer. However, it is successful to transfer a file in msn in my test lab. Below is my rule set of firewall in simple

1. any any msn-file-transfer deny

2. any any any allow

Thanks a lot!

Johnny

[nrice]

Are you on an older Content version?  There was a bug, resolved in Content 180, which prevented msn-file-transfer from being blocked.  If you are on a current Content version, you may want to contact Support so that they can troubleshoot the issue with you.

[johnnywong]

I am using the current version which is 186-631. BTW, Any Any can block msn-file-transfer but not in trust->untrust when I fine tune the policy. It is also show 'deny' in traffic log. Any configuration I miss in the policy?

Thanks!

Johnny

[swhyte]

Hello Johnny,

it sounds like this may be a bug with our content. Can you call into your support to pursue isolating this?

Also it would be great if you could get a pcap of the msn file transfers that is being let through the paloalto device.

thank you,

Stephen