This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About RSKadish
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About RSKadish
08-29-2016
15Posts
0Likes
1Solution
Aug 29, 2016Last Visited
User
Activity
User
Profile
Latest posts by RSKadish
| Subject | Views | Posted |
|---|---|---|
| 3591 | 08-29-2016 06:35 AM | |
| 3657 | 08-26-2016 01:41 PM | |
| 3430 | 02-22-2016 08:36 AM | |
| 3418 | 02-22-2016 07:47 AM | |
| 3422 | 02-22-2016 07:10 AM | |
| 3381 | 01-05-2016 11:26 AM | |
| 8983 | 01-04-2016 12:33 PM | |
| 3865 | 12-21-2015 07:13 AM | |
| 4198 | 12-18-2015 09:10 AM | |
| 9367 | 12-16-2015 07:53 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 07-09-2015 12:43 PM |
| Date Last Visited | 08-29-2016 09:58 AM |
| Posts | 15 |
08-29-2016
06:35 AM
Good morning, The problem seems to have cleared up over the weekend. I assume that it was either the SSL state cache in our browsers or in our firewall that needed to catch up. Best, - Steve
... View more
08-26-2016
01:41 PM
Is anyone else having a problem browsing to urlfiltering.paloaltonetworks.com? We can't get to it from here. We are being told that the certficate has been revoked. (SEC_ERROR_REVOKED_CERTIFICATE) I tried two different paths to the Internet from our corporate network with the same results. The rest of paloaltonetworks.com is accessible. Thanks, - Steve
... View more
02-22-2016
08:36 AM
Fantastic. I appreciate the help!
- Steve
... View more
02-22-2016
07:47 AM
Hi Raido,
Thanks for the help! By any chance is this a version 7 CLI command? We are on version 6.1,9, and I don't see it in the reference guide for that version.
Best,
- Steve
... View more
02-22-2016
07:10 AM
Hi all,
My team is currently undergoing an audit and one of the requests is for the configuration of the security profiles, including URL filtering, from our firewalls. As we are fairly new to PANOS this has not been requested before. I don't see anything in the CLI reference guide for PANOS 6.3.1, our current version, that would give me this information. I also don't see any way to get the output cleanly from the Web GUI.
I suspect if I have our admins run "show config" in the CLI that the information is in there, but I'm looking for something more targeted.
Any suggestions?
TIA!
- Steve
... View more
01-05-2016
11:26 AM
Hi all,
Is there any way to get information out of the Applipedia? Or out of the Applications screen from the firewall console? I've several times had the need to discuss application policies with non-technical users. For instance, right now I'd like to present the list of social network applications to a marketing exec so she can tell me what her staff needs and doesn't need. It would be super-useful to be able to export that information from the Applipedia.
Any help is greatly appreciated.
Thanks,
- Steve
... View more
Labels:
- Labels:
-
App-ID
01-04-2016
12:33 PM
Hi Benjamin,
Thanks for the info; I wanted to wait until our primary firewall admin got back from vacation to discuss it with him. We agree that we could enable github-base without SSH and put up with the errors. However I disagree that the traffic application should be "github-base" in the first place since this is basically a straight HTTP site. We are going to open a ticket with PA tech support about that.
Thanks,
- Steve
... View more
12-21-2015
07:13 AM
Hi Brandon,
That's the thing, the Palo Alto definition of their Music category specifically says that it's NOT for streaming content. If it was (similar to Blue Coat's "Radio/TV Streams" categories) I wouldn't have a problem with it.
We don't allow iTunes in our environment, and this is what I'm seeing for the "Music" category ( Rehearsal studios, song lyrics, someone buying tickets to "The King and I" on Broadway...)
... View more
12-18-2015
09:10 AM
Does anyone else feel like the Palo Alto URL Filtering categories "Music" and "Entertainment and Arts" have a lot of potential for confusing crossover?
Name: Music
Description:
Music sales, distribution, or information. Includes websites for music artists, groups, labels, events, lyrics, and other information regarding the music business.
Name: Entertainment and Arts
Description:
Sites for movies, television, radio, videos, programming guides/tools, comics, performing arts, museums, art galleries, or libraries. Includes sites for entertainment, celebrity and industry news.
As compared to Blue Coat's description for it's "Entertainment" category:
"Sites that provide information about or promote popular culture including but not limited to film, film critiques and discussions, film trailers, box office, television, home entertainment, music, comics, graphic novels, literary news, and reviews. This category also includes entertainment-oriented periodicals, interviews, fan clubs, celebrity gossip, and podcasts; and music and film charts."
Honestly I've never seen a URL filter that bothers with a seperate "Music" category. Our firewall team has the mistaken impression that it's for streaming music which has upset some users.
... View more
Labels:
- Labels:
-
URL Filtering
12-16-2015
07:53 AM
Hi all,
Thanks for the replies. This is one of the websites that our PAs are blocking:
http://www.whatsmyua.com/
Note that this page isn't on GitHub itself. The source code for the project is on GitHub. Looking at the page's source, I see two links to GitHub - the "Source" link at the top and the "send and issue or pull request" link at the bottom. Both of these links use the HTML tag
<i class="fa fa-github"></i>
My HTML is pretty rusty, because I thought that <i> was for italics.
So I'm back to the original question, why do we need ssh enabled to use this site? For that matter, should we need the github-base app-ID enabled at all?
Thanks,
- Steve
... View more
12-15-2015
11:32 AM
Hi all,
Can someone please explain why the "github-base" application depends on SSH?
We are running into a number of problems with web sites that are hosted on Github. Users want to get to these sites for legitimate reasons. IT people have also wanted to download Github projects. I don't have a problem with approving github-base, but we have no desire to approve SSH.
Any help or advice is appreciated.
TIA,
- Steve
... View more
12-09-2015
07:48 AM
Hi,
Thanks to both of you for the suggestions. I did reach out to our sales engineer to request the log as a feature. A custom response page is probably going to be our best bet.
Thanks,
- Steve
... View more
12-08-2015
01:34 PM
Hi all,
We are using PANOS URL Filtering and SSL Decryption, and we reject a variety of SSL certificate problems such as expired certificates, SHA-1 signing, etc. When one of our users hits one of these web sites, they get a "block" page. This invariably leads them to submit a request to have the site unblocked, without any additional information.
We have been unable to find any log on the Monitor tab of the firewall console that will give us the reason why the certificate was rejected. At most we get traffic logs with "aged-out." Is this information being collected by PANOS? Is it available anywhere in the console? How do other people diagnose these blocks?
Thanks,
- Steve
... View more
Labels:
- Labels:
-
Logs
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-29-2016
09:58 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks