About JimAraujo

That was my thoughts excatly, however I am not getting the desired behavior. I've create a new security poliy rule above the one that contains the default file blocking one...in this new rule I have file blocking profile set to none. For the second part of my qusestion, trying limit this rule to hit only on a specific URL I've done the following.   Create a new custom URL category called FileDownloadURLs, within that Custom URL category I've put in *.service-now.com which is the specific URL we want to allow file uploads and downloads.    Now back to the security rule I created above, I've selected in URL Category section the "FileDownloadURLs" custom category Icreated.   Issue is when browsing to the site and tyring to upload, I am seeing in the threat logs it is being blocked by the security policy at the bottom? So it's not hitting the one I created.   Before I go more into this...Is this the best way to limit file downloads based on a single URL or domain? ... View more

Both next-hop destinations share the same VLAN, so does PAN rely solely on the PAN's interface link state(e1/2 UP/DOWN) or does it check each next-hop via a ICMP ping or something? ... View more