Any good way to block DeepSeek by PaloAlto Firewall(PA-820)

[stevelu]

Could  you tell me a good method to block DeepSeek ? Thank you very much.

[Raido_Rattameister]

Info from "Applications and Threats Content Release Notes"

https://live.paloaltonetworks.com/t5/customer-resources/new-app-ids-for-deepseek/ta-p/1220674

[stevelu]

Thank you very much.

Could you let me know if you have any information about the timeline for the availability of the new app ID(deepseek-api,deepseek-chat,deepseek-platform)?

[Raido_Rattameister]

[Update 2/20/2025] - Due to some minor issues discovered in QA testing we are delaying the previously scheduled February 19, 2025 release to February 24, 2025 Pacific Time Zone.

https://live.paloaltonetworks.com/t5/customer-resources/new-app-ids-for-deepseek/ta-p/1220674

[stevelu]

Thank you for your response. However, today is already February 24 (UTC+8), and I still have not seen the app ID related to Deepseek available for use during work hours.

[stevelu]

This morning, on February 26, 2025, I finally found the app ID for Deepseek on PA. However, after setting it up, it didn't work at all, as shown in the attachment. I'm really surprised.

[OtakarKlier]

Hello,

Also utilize URL filtering and NDS filtering if you can.

Regards,

[stevelu]

Thanks Sir.

Do you mean that in order to block DeepSeek, it's not enough to just use app-id.

"URL filtering" and "DNS Security" need to be used in combination? Is that correct?