Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About lardsa
About lardsa
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
08-18-2015
27Posts
5Likes
1Solution
Aug 18, 2015Last Visited
User
Activity
User
Profile
Latest posts by lardsa
| Subject | Views | Posted |
|---|---|---|
| 829 | 09-08-2011 01:36 AM | |
| 829 | 09-05-2011 05:26 AM | |
| 794 | 08-31-2011 04:40 AM | |
| 1717 | 08-10-2011 07:28 AM | |
| 656 | 08-10-2011 04:55 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 07-22-2011 04:33 AM | |
| 1 | 07-22-2011 04:37 AM | |
| 1 | 07-22-2011 01:22 AM | |
| 1 | 07-22-2011 01:15 AM | |
| 1 | 07-18-2011 06:57 AM |
User Badges
Public Statistics
| Date Registered | 06-29-2011 05:27 AM |
| Date Last Visited | 08-18-2015 09:07 AM |
| Total Messages Posted | 27 |
| Total Likes Received | 5 |
09-08-2011
01:36 AM
My 2 cents is that PA should let us list & manage root CAs from GUI.
... View more
08-31-2011
04:40 AM
I agree, Brightcloud must improve their system, I send a minimum of 4 URLs per week and I noticed some URLs are back to their old/wrong category after some time.
... View more
08-10-2011
04:55 AM
about your first question for names like *.facebook.com, it appears when a website is using SSL. Because of encryption, PaloAlto cannot see the real URL that is asked by the client. So it will log certificate name instead. If you want to see URLs inside a SSL encrypted session, you must configure PA SSL Decryption.
... View more
08-09-2011
08:39 AM
You can't do it in network objects for obvious reasons. But you can do it partially in URL filtering, it supports wildcards on subdomains.
... View more
08-08-2011
08:16 AM
Did you also create bi-directional NAT rules for SQL and mail server? You should post a screenshot of your filetring rules, PBF, NAT and network interfaces. I have some use case with 3 internet lines and no problem....
... View more
08-08-2011
08:01 AM
Policy Base Forwarding rules are there for that Rule 1: Exchange server to internet will exit on SDSL interface Rule 2: Exchange server to internet will exit on SDSL interface Rule 3: all other traffic to internet will exit on cheap internet line
... View more
08-03-2011
02:23 AM
Did you retry since 4.0.4 was released ? It has some SSL fixes in release notes ...
... View more
07-28-2011
07:35 AM
Hello, you configure Date Filetering Profiles from Security Profiles menu. There you can input what type of files to scan, what keywords you are looking for and even say you want to capture/keep a copy of the file on the firewall itself if it matches. regards
... View more
07-25-2011
01:02 AM
Hello, Facebook-chat is also an application in PA , you can block it if it uses same APIs, did you try it ?
... View more
07-22-2011
06:27 AM
Ok I confirm Block page is not appearing while it does on non SSL one.
... View more
07-22-2011
04:37 AM
1 Kudo
Hi, There is no absolute good answer about this. Security mongers will scream about this heresy while bored admin will say 'who cares if no virus comes in?' I opened broswer-based on 80,443,8080,8443,81 and it suits 99% of user needs.
... View more
07-22-2011
04:33 AM
1 Kudo
Probably a mix of both, as PA doesn't know about all possible applications. For web filetering rules, application based is good. Now for datacenter/production needs ... what would happen if suddendly after an APP ID update , it won't recognize MSSQL protocol ? In addition, many apps aren't running on officially supported ports.
... View more
07-22-2011
02:20 AM
Only website that shows slowness for my users with decryption enabled is Google Mail and only with Chrome (IE & Firefox are ok). I have a support ticket opened for that.
... View more
07-22-2011
01:35 AM
I am using a custom log format with HTML inside: <html><body>Alert from NOEXI501<br><br>Rule: $rule<br>Severity: $severity<br><br>Source: $src ($srcuser) Zone $from<br>Destination: $dst ($dstuser) Zone $to<br><br>Threat description: $type/$subtype<br>$threatid<br><br><br></body></html>
... View more
07-22-2011
01:22 AM
1 Kudo
Hi, I have a similar install than you, but I don't put URL categories filters in decrypt rules (I left it to 'Any') and it works like a charm. Also are you using some user identification? May be with a captive portal ?
... View more
07-22-2011
01:15 AM
1 Kudo
Hello, Source IP: YourMailServer DestinationIP: Any Source Translation IP Type: ip-static Translated address : PublicIPAddressYouWant Bidirectional: yes Destination translation: none
... View more
07-18-2011
06:57 AM
1 Kudo
Well I am not sure if it's a good idea, for example gotomeeting is a sub app of Citrix ... I don't know what Citrix app allows exactly, but I can enable gotomeeting without enabling Citrix (and it works fine), while it gives warnings during commit. I wouldn't want PA to auto-enable Citrix for me, it may allow too many things than what I want...
... View more
07-13-2011
04:11 AM
Also note that if you have Dynamic URL filtering box enabled in your URL Filtering profile, it can lead to big slowdowns if your PA Management IP is not allowed to get updates from Bightcloud directly (5 seconds timeout). I experienced it myself.
... View more
07-13-2011
04:06 AM
Hi, PA doesn't do live content scanning for classification (it checks for other things like viruses and vulnerabilities of course) What would be a good idea may be : if you catch a URL like " http://translate.google.com?site=www.porn.com ", then consider URL "www.porn.com" instead of original URL.
... View more
07-13-2011
03:43 AM
Hello, I have same problem, but only when SSL decryption is enabled. What about you ? Regards
... View more
07-13-2011
01:44 AM
Hi, Many of our users are using Teamviewer to access customers computers outside the company. Unfortunatly, by default Teamviewer will also share their desktops too, through a permanent connection to Teamviewer servers. In addition, many of our users are using it to access their office computers from home, without using corporate VPN. When Teamviewer is running on a computer, it is potentially open to anyone inside Teamviewer company or anyone who knows the small secret 4 digit code. To sum up, we would like to allow our users to use Teamviewer as a client to access remote PCs outside the company but block screen/resource sharing of their own PC via Teamviewer because it is of course big security problem. Sub-applications for teamviewer like 'teamviewer-client' and 'teamviewer-sharing' would be great help for us. Thank you for your time.
... View more
07-13-2011
01:27 AM
Hello, any news on this topic ? I would to see this implemented, I have some special conditions where it would help. Regards
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
