This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Josh990
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Josh990
19Posts
2Likes
0Solutions
Last Visited
User
Activity
User
Profile
Latest posts by Josh990
| Subject | Views | Posted |
|---|---|---|
| 1473 | 01-28-2022 02:20 AM | |
| 1100 | 01-17-2022 10:06 AM | |
| 1113 | 01-17-2022 09:57 AM | |
| 1868 | 12-09-2021 10:14 AM | |
| 1115 | 11-16-2021 02:41 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 01-17-2022 10:06 AM | |
| 1 Like | 06-18-2021 02:57 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 3 Likes | |||
| 2 Likes |
User Badges
Community Statistics
| Member Since | 03-26-2020 08:37 AM |
| Date Last Visited | |
| Posts | 19 |
| Total Likes Received | 2 |
01-28-2022
02:20 AM
Thanks for the responses all. I still believe PAN-OS should support blocking specific TLDs in a simple way; this seems like a fool proof way to greatly reduce the attack surface since we never need to visit sites using these TLDs for legitimate reasons.
... View more
01-17-2022
10:06 AM
1 Kudo
Worked it out, the test pages default to http (80). Whereas the successful entries were using https (443). Therefore as expected, when not decrypted only the SNI/CN can be enforced upon. 🙂
... View more
01-17-2022
09:57 AM
Hi All, I noticed that the Palo Alto test pages for 'newly-registered-domains' and 'command-and-control' do not block when copied from a chat window or manually entered into a web browser. However when I directly click the link on the Palo Alto test pages for 'newly-registered-domains' and 'command-and-control' they do block. This does not appear to apply to the other categories I have tested thus far. All I had a look at the URL Filtering logs on the firewall and noticed that the mentioned allowed instances of 'newly-registered-domains' and 'command-and-control' only show as 'urlfiltering.paloaltonetworks.com/' (therefore 'low-risk' as the Category) so it's failed to identify the webpage correctly. None of these test pages are decrypted, based on the domain being 'paloaltonetworks.com' but this variable has been eliminated since some of the test pages work as expected. Please can someone else test this? Cheers
... View more
12-09-2021
10:14 AM
Hi All, I want to start blocking 'high risk' top level domains within PAN-OS. Has anyone else done this successfully? I presume the following should work based on PAN-OS RegEX: URL Category: *.eg/ *.ex/ etc.... Set URL Category to 'Block' within existing URL Filtering Profile. Cheers
... View more
- Tags:
- pan-os
11-16-2021
02:41 AM
Hi All, I'm curious to know how many of you have implemented the URL Filtering best practise, Content-ID - 'Hold client request for category lookup' feature? This feature is of particular interest to me because without this feature, the logs of other systems can be skewed if the session is initially permitted. What is the recommended setting for 'Category lookup timeout (sec)'? I presume if category resolution took >4 seconds something major must have gone wrong. Regards, Josh
... View more
Contact Me
Likes Given To
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks