About kbrazil

Hi There, I could be wrong, but I don't think simple Multicast Routing will accomplish this.  This is almost more of a protocol forwarding option, like DHCP forwarding.  I haven't done research on this, but I would first google to see if there is a way of accomplishing this with a normal router.  If it can be done by configuring Multicast in a certain way then we may be able to do it on the firewall using standard Multicast configuration.  If not, broadcasting ATV traffic across L3 boundaries may take some type of proprietary solution, such as protocol (bonjour?) forwarding.  Note, that there is a reason why these protocols have broadcast-domain scope - they can be quite chatty, so it may not be in your best interest to break that model. Cheers, Kelly ... View more

Hi Alan, In PAN-OS 5.0 the app dependencies are handled differently than previous versions.  You can now specify the application you want and the dependencies will automatically be temporarily enabled at the beginning of the session until your desired app has begun or App-ID gives up after a few packets.  This will block most unauthorized web browsing attempts (depending on how many packets are allowed before the web-browsing dependency is exhausted) In PAN-OS 4.1 and below you can use a URL filtering profile to really lock down the config (you can still do this in PAN-OS 5.0, too).  Turn on a URL filtering profile (this works whether you have the URL database subscription or not) and set to alert on * in the block list.  Then check the logs to see what URLs OWA is using and add those to the URL allow list and set the block list to block. Cheers, Kelly ... View more

Hi Jeff, Is what you are describing similar to page 7 of this document? BGP-diagrams-ext.pdf Cheers, Kelly ... View more

If that works I would see it as a temporary troubleshooting step and workaround until the root cause is found and fixed.  Your support provider should be able to assist here. Thanks, Kelly ... View more