About mahmoodm

Hi Raido, Thanks for the response and now it makes more sense. one more question with regards to the action,how the action is derived for the AV and WF database,please clarify.   Thanks ... View more

Hi Raido, Thanks for the response.   So this means that the reason for having the wildfire action with AV action is take action if AV database missed this signature and wildfire categorized the file as malacious and based on the verdict the action is taken.   For the above to work do i need to have WF profile as well on the same security rule or AV profile will be enough as AV profile also has WF action.   Thanks ... View more

Hi Raido, Thanks for the response and really thankful to you guys for sharing your knowledge.   If file passes firewall then hash is taken and checked against wildfire cloud to check if this file has already been scanned. If yes then decision is taken based on wildfire action configuration in antivirus security profile.(WHAT COULD BE THE AV ACTION PLAYS THE ROLE HERE,I MEAN WHY WOULD WE NEED AV ACTION HERE IF WE ARE GOING TO HAVE WF ACTION,MAY BE I AM CONFUSED OR NOT GETTING THE POINT,PLEASE CLARIFY.   Thanks   ... View more

Hi, No the traffic is between user zone and server zone,but still the file blocking doesnt work. Please confrim can we block files transfer between the systems which are using SMB because i read today that SMB3 is encrypted hence PA is not able to identify the fiiles.   Thanks ... View more

Hi, I cans see sometimes n sometimes not,i am not sure y this is happening. I think when i access the shared folder on the server n try to copy any file from my pc into the shared folder i am assuming that the FB rules should take action as defined but this is not happening not sure why.   Thanks ... View more

Hi BPry,   Thanks for the response and i really appreciate your efforts. So when and how the wildfire action will be taken as in new version the wildfire action has been removed from the file blocking profile.   Another question with regards to file blocking is how can we block files accessed to/from shared folders in windows. Today i applied a file blocking profile to a server n client and blocked .xls,exe etc but the files were able to accessed,please can u guide me in this. ... View more

Hi BPry,   Thanks a lot for your response,kindly can you please clarify further the below. 2) Wildfire will analyze the files hash and perform a hash check with Wildfire. If the file is already known it will take the known action, if the hash isn't known then it will forward the file to be analyzed. (What will happen to the unknown file while we wait for the results,will it be delivered to the user..?.)   So to understand and make it clear for myself is that its not recommended to have file blocking and wildfire profile at the sametime on security rule or it depends upon u r requirement.May they can be applied in a scenario where we want to block some files unsing FB profile and allow some files but only after WF analysis.   Thanks   ... View more

Hi,   Configuring it on the active device should be OK as this will be replicated to the standby device.   Thanks ... View more

Hi, Thanks a lot for great clarification.   So is it recommended to have the wildfire profile and file blocking profile on the same security rule or what is the best practice.   Or we need to segregate the rules for separate profiles.   Thanks     ... View more

Hi reaper,   Thanks for the response and it clears most of the doubts. Please can you explain whether the file blocking profiles work the same way i.e the session is scanned for all the traffic to look for signatures of the files which are to be blocked/allowed etc..?   And one more confusion is that why do we need to have both the wildfire and file blocking profile applied to the same security rule while if we define the file blocking profile to block certain files then why would we want them to be send to wildfire for analysis.   Thanks ... View more

Hi Guys, ... View more

Hi, Whats the the AD domian name,please try domain\username ... View more

Hi Raido, Thanks for the response. My confusion comes from after the user connects to the gateway he is assigned an IP address without any defaut gateway. How does the client connect to the internal resources..?   And do we need to use tunnel interface or not,if used then whats the purpose of it.   Thanks ... View more