About dlopez

Hi @mario.chancay ,   Thanks for asking!  I don't know if you still look at this thread.   Must Have: * None that I can think of at the moment.  I will edit this as I think of items.   Nice to Have: * The ability to select multiple items at once from a drop down menu.  For example, if I want multiple source addresses in a security policy rule, I currently have to click Add, select one, click Add, select one. etc. * Change Link State to down for sub-interfaces. * SSO for clientless VPN for the same SAML iDP.  (I think the NGFW would have to intercept and store the iDP cookies.)   If anyone is drive-by browsing and would like to see this feature, like this post!   Tom   ... View more

Thanks for the input folks. I will submit the feature request. -Jim ... View more

I've filed a feature request for thisa while ago. The workaround should work, but i'd rather have the box DL the file, send it to Wildfire and delete it (not sending it to the user), if necessary. ... View more

In firewalls running 3.1.7, I was able to use a custom URL category to create an exception for the domain *.citrixonline.com.  I think Citrix Online domains/IPs are the main culprit when SSL decrypt breaks GoToMeeting or another Citrix product.  My opinion:  When implementing SSL Decryption, create rules that allow for exceptions for both sources and destinations, and the use of a custom URL category is super helpful as well. ... View more

When demoing the product, I could not get this to work.   We don't have any desire for URL subscription license, so we cannot BLOCK ALL then have an allow 'whitelist'.   Tried to block *.* and an Allow List, but the Allow List is processed after the Deny List instead of before so the wildcard blocks access. This is why we'd like to see a whitelist destination 'group' (for lack of a better term) to put into the destination field in the policy.   Obviously the strings in this group would only be applicable to HTTP/HTTPS/FTP.. URIs (and their associated applications/services).   Again, allowing by URI and not the named derived from reverse lookup would be invaluable to many here agencywide and I'm sure to many organizations. - I don't know of any other product that offers this and think it could be a differentiator. Thanks! ... View more