About MohamedSharief

Hi all,   I had an issue where a client created a Custom URL category with multiple of URLs and added it in a Security Rule, all of the URLs specified in that custom category is matching except one URL with wild card such as *.sometechnologies.com.   I'm using the command >test custom-url url <MyURL> to check the match but for only one url wild card is not working and the output of the command will be 'any' instead of the custom url category name 'test'.   The client is running PANOS 7.1.5 so I made my lab with the same setup and tried the same url and it was matching 'test'.   The only difference between my client setup and my setup is I've having the URL filtering license which is not even required in case of custom url category.   Have anyone experienced the same?   Regards, Sharief     ... View more

Network setup:   PA3020 E1/2-->E1/1 PA500 E1/2-->Internet.   In PA3020, we have configured the service route to paloaltoupdates through e1/2. Then traffic will reach pa500 e1/1 which will be routed to internet via e1/2. PAT configured on e1/2 which will be going to internet.I'm sure route, NAT,security policies are proper.   In PA3020, connection to paloalto update server is established. even anti-virus updates download also started. when we check the show session id xxx. its showing lots of bytes exchanged between C2S and S2C. but at last TCP-reset by client ( send by palo alto firewall ). we are using staticupdates.paloaltonetworks.com which is working fine in PA500 but not working in PA3020.   Since the PA-3020 deployement, updates are working fine. there is no configuration changes made recently. but suddenly stops working and session end reason is tcp-rst-by-client.   we have created app-override on both firewalls to update server IP. but no luck. Please suggest how can we proceed further. ... View more