About JANARTHANAN1392

Looking for the better idea. User reported xyz.com site is not working, When I look at the firewall logs xyz.com was allowed in firewall. And I filtered the logs with source IP for 5mins time frame and found deny logs for particular IP address 1.1.1.1 I am not sure what is the url for 1.1.1.1, In such case what you will do to find the URL for 1.1.1.1   I usually do a search in splunk log server, for this IP 1.1.1.1 it will show all the related logs, I filter with dns logs then I can find the hostname for 1.1.1.1 ex. ab.xyz.com, Now I am able to permit this additional URL, it will fix the issue.   What if I don't have splunk log server, how can I identify this additional link(ab.xyz.com) Also is there a way to find all the links that is being used in a website?   #suggestion   ... View more

All of sudden ping request traffic got blocked by application filter ID ICMP type 8. It was permitting by app ID "ping", suddenly the request is detected as "ICMP type 8" in the logs and blocked.  This is for all the traffic which was permitting through "ping" APP ID.    Was there any update in signature? ... View more

User trying to access external site, That particular website is not accessible getting " This site can’t be reached ". The same URL is working on Firefox.  Request traffic from chrome not reaching paloalto, the same from Firefox I can see the traffic logs. Other websites working in chrome browser through paloalto.  The reported site is accessible in same machine, chrome browser outside network(not company LAN).   ... View more