About d_ballam

Its been a long day so might be being daft but i have the following issue. as you can see googleapis.com and translate.google.com maps.google.com are being listed as spyware and adware coming from the brightcloud list. I have requested for this to be modified but they came back today saying it was in the correct category (computers and information) they also suggested upgrading to 4.287 but cant see this being changed in their change log. we are currently on 4.286 am i the only one with this issue? ... View more

Has anyone used Screencast-O-Matic and come accross the following issue when a normal user tries to use the java based browser plugin they are blocked from using it (palo alto doesnt show a block). from looking at our external firewall filters it seems a zip file is downloaded in the proccess but the palo alto is blocking on .exe file block. again this is not visible in the palo alto logs but found out by trial and error to see what part was blocking the site. Maybe i am being daft but is there any way to keep file blocking on but allow the downlaod of the exe from that specific site. is my best bett to write a new rule for that specific site and put it above the other rule. ... View more

background: we have a new installation of a PA-500 (running 4.1.2) which sits behind our edge firewall (TMG 2010) in vwire mode. basic setup. the pa-500 external interface connects directly into the edge firewalls internal interface and the pa-500 internal interface connects directly to our production network. our DNS, AD etc are all on this production network. the PA-500 is only doing content filtering for web / applications. we have have the following rules (simplified but basically the important parts) rule #1 allow internal to external for <selected users> rule#2 allow internal to external for any users rule #3 deny from internal to external for any as you can see rule one is used for selected members on the domain rule 2 shouldnt be required as this basically lets anyone who isnt a member of the selected group from rule 1 out to the internet anonymously. and rule 3 is ther as a deny all (which should be there by default) as you can see rule 2 should be removed BUT the problem is this If we remove rule#2 our TMG firewall loses connectivity with the production network so loses its secure channel with the domain / domain controls. this causes the firewall to stop authenticating users thus the firewall kills all conenctions. can you pleae confirm that rule#2 should never be in the pa-500 setup and confirm that in vwire mode the device should not stop non web/application protocols from communicating. ... View more