05-29-2017 06:27 PM
Im new Paloalto FW and welcome any advice.
I`ve applied url block a Specific web site(internal DMZ serverfarm) From Untrust access /w Paloalto pa3020/os 6. Exist system was `https ssl` decrypted. So, when I get into the site with `http`Its blocked with FireWall But when I get into the site with `https' Its not blocked. My question is How can I block `https` url with Pa3020/ os6? thx for reply!
05-29-2017 07:06 PM
Welcome to community.
If you want to decrypt traffic from Untrust towards server under your control then you have to export certificate together with private key out from web server and import it into firewall.
If you click on mag glass is Decrypted yes or no on those sessions?
If you don't decrypt then Palo will identify site based on website address on certificate as HTTP GET goes through firewall encrypted.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
