still see in logs while I already blocked it

Showing results for 
Show  only  | Search instead for 
Did you mean: 

still see in logs while I already blocked it

L0 Member


panorama firewall logs show threat for example spyware which threat name is website link. I blocked website IP and the link but still I see it in repeated many times which full the logs .The source address from DMZ zone  and the destination address from outside. what can I do to not see it again in logs ?


Cyber Elite
Cyber Elite

You should confirm that the Security Rule that is the blocking the site should be both the ip AND the fdqn for the site.
I would also make sure that this rule is above the existing rule(s) that is allowing the traffic.  Maybe put this as rule 1 in your policy.
Outside of that, with a remote desktop session to actually see what is going on, to screen captures of  your policies, this will be different to troubleshoot via the forum.  Best to create a simple TAC web case and have an engineer look at your policies and assist you.

What other questions may I answer for you?

Help the community: Like helpful comments and mark solutions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!