10-04-2022 11:35 PM
Dears
panorama firewall logs show threat for example spyware which threat name is website link. I blocked website IP and the link but still I see it in logs.it repeated many times which full the logs .The source address from DMZ zone and the destination address from outside. what can I do to not see it again in logs ?
10-07-2022 08:04 AM
You should confirm that the Security Rule that is the blocking the site should be both the ip AND the fdqn for the site.
I would also make sure that this rule is above the existing rule(s) that is allowing the traffic. Maybe put this as rule 1 in your policy.
Outside of that, with a remote desktop session to actually see what is going on, to screen captures of your policies, this will be different to troubleshoot via the forum. Best to create a simple TAC web case and have an engineer look at your policies and assist you.
What other questions may I answer for you?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
