About stewart

Let me make sure I understand the last question. another issue is that I configure a policy between the users and my the file server to allow applications ( ms-ds-smb, msrpc, netbios-ns, netbios-ss, netbios-dg, ping) and drop some file types. So you have configured File Blocking profile under Objects . You have added exe as the file type and set the action to block . You can also set the direction to both if you want to block exe to and from the file server. You then added this profile to the Security Rule you created. With the profile set it should block exe files.  The Action on the security rule should be set to Allow . ... View more

Let’s see if I can answer a few of your questions. I don't have content Filter License.: You don’t need threat to create rules based on application or service. Am I required to configure ssl decryption to block internet applications or file types? No, probably best to leave SSL decryption off until you get your rules setup and working. SSL decryption works best with the URL license because you want to exclude URL categories like Financial and Education. shall I've a content filter license to configure ssl decryption or not? You don’t need threat prevention to do application based rules. You won’t need to add any profiles to your security rules. to open internet access for users, I open web-browsing application and ssl: If you have the application default set under service in the security policy you will run into issues if you only have web-browsing and SSL added to the rule. It would be best to create an Application Filter (under the Objects tab) and add categories to the custom filter. You can do it based on Risk level or on one of the subcategories or any combination. while I'm trying to browse the internet I find YouTube is allowed also. and I can't block it anyway until I remove ssl from the applications. which causes all the HTTPS sites not to work. If you want to block YouTube you can create a rule and place it above your web / ssl rule. Add youtube and the application, leave the service set to any and Set the rule to block. ... View more

Yes it will pass traffic based on the rules you have set up. ... View more

We had an issue like that. We had the hello set to 2 and when the PA was under high load it would miss hello msgs from neighbors. The dead timer on L3 neighbor would expire and the link would be moved to down. PA does not recommend using a hello lower than the default of 10 seconds. ... View more

Hi cheon, What was the issue you had? We have run into OSPF issues that have a lower than default hello interval. Like 2 seconds. ... View more