- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
01-30-2025 03:21 AM
Hi,
I want to block a few AI Apps like LLMA, Deepseek application in Paloalto,
But i am not seeing those Apps, Is there any different config for those?
01-30-2025 08:00 AM
Hello,
There are several ways to accomplish this.
URL filtering: https://live.paloaltonetworks.com/t5/community-blogs/new-advanced-url-filtering-category-artificial-...
Application filtering: https://applipedia.paloaltonetworks.com/ use the sub category Artificial-Intelligence.
Hope this helps.
01-30-2025 11:36 PM - edited 01-30-2025 11:38 PM
Hi All , Do we have an app-id for DeepSeek AI ? Does anyone has visibility of DeepSeek AI traffic on their NGFWs or Strata Cloud Manager ? Here is the list AI bit no DeepSeek
adobe-express-base |
adobe-firefly-base |
azure-openai-encrypted |
bing-ai-base |
chatbot-base |
claude-base |
deepl-base |
github-copilot |
google-gemini |
huggingface-base |
krisp-base |
ms-copilot-studio |
murf-base |
openai-api |
openai-base |
openai-chatgpt |
perplexity-ai-base |
weights-and-biases-base |
writesonic-base |
01-31-2025 08:39 PM
There is no app-id for this yet. The driving URLs are already categorized as artificial-intelligence, so if you block that category you'll cutoff access to utilize the service. Just from a limited about of testing, if you block www.deepseek.com/ and chat.deepseek.com/ it'll successfully cutoff access to the application. Note that this will work regardless of whether or not you're actually decrypting the traffic.
02-02-2025 09:30 PM
Thanks BPry, our firewall is in TAP mode atm so unable to block DS traffic, Is there a way to recognise DS traffic without app-id ? the firewall recognised all other AIs traffic ( Open AI, CoPilot.... but not DS
02-03-2025 02:36 AM
As of now i am using a custom URL Block list and blocked DS Domain.
It's would be great if PA release a app-id for DS
02-03-2025 10:00 AM
Do you have a URL list? As of now I only see 2 ( www.deepseek.com/ and chat.deepseek.com/ ) .... thanks
02-06-2025 09:20 PM
i used deepseek.com & *.deepseek.com domains in custom URL Category,
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!