Read only

[infotech]

If I want to set an application like linkedin so that user can view it but not do any thing like send emails, endorse people etc make it read only how do I do that?

[hheck]

I believed linkedin is actually a parent application (basically a group). I think you would only want to allow linkedin-base instead.

[HULK]

Hello Infotech,

Palo Alto networks App-ID signature is having below mentioned signature for linkedin. Hence you can choose the required sub-category in your "Application" filed and set the required action for it ( In a security policy).

NOTE: As per your query, you can set application as "linkedin-base" just to view the profile.

Hope this helps.

Thanks

[infotech]

Oh okay I was trying to find a listing in the PA documentation that gives the information describing what each options like linkedin-base gives the users access too

[infotech]

Thats good to know hulk but how does that tell me what the difference in access between linkedin-base from linkedin app?

[HULK]

Hello Infotech,

You can verify the functionality( detail information) of each App-ID in Application Research Center.

Example:

Hope this helps.

Thanks

[infotech]

Great information hulk but I still don't see where it tells me the difference between linkedin-base and linkedin-apps in reguard to limited there ability to post , send email. My goal is to make it so they can only looked at linkedin and nothing else

[panos]

better block sub applications and allow main

make a lab test.