how to block a email sender in paloalto firewall

[Marsooq-Akkaradathil]

Hi ,

is it possible to block a sender of email in paloalto firewall eg abc@xyz.com

Thank you,

[kiwi]

Hi @Marsooq-Akkaradathil ,

If the email address is visible in the traffic's payload then you should be able to create a custom signature that matches the email address and block the traffic ... you'll might have to decrypt traffic though.

That said, could you please elaborate on what exactly you're trying to achieve ? Block 1 specific address/domain/email service ?

Thanks,

-Kiwi.

[Marsooq-Akkaradathil]

Hi @kiwi 

i want to block one email address eg: sales@abc.com  as this email containing phishing urls. so i need to block the sender.

can you explain how to block this email address and also the domain itself