About kmurphy6

I ran the command 'show system statistics application' on the CLI of our PA-4020 at the Internet border and see these results.... Virtual System: vsys1 application                      sessions   packets      bytes -------------------------------- ---------- ------------ ------------ facetime                         36346      55150        36706211790 google-video-base                40330      3466105      62341573161 mozy                             656        11642        2143728771 vimeo                            137485     263408297    259778519788 android-market                   2673       6024245      6362573242 yousendit                        3329       90659        27826458438 yum                              72329      1284043      2050390425 amazon-cloud-player              15729      2464502      2043038257 soap                             923520     24875979     10624880850 facebook-mail                    19774      3435135      2017554859 pcanywhere                       16052      18133        2006225344 ms-exchange                      32235      12012690     6249051910 ssh                              490175     4762525      2368436927123 amazon-cloud-drive-uploading     74         1671838      1878615128 qq-audio-video                   89         1042         1845425531 rss                              2138582    123878273    100605058292 bomgar                           120752     2054117      1817296056 itunes-appstore                  115640     2983296      1808015578 sybase                           1976       3598683      1803018950 web-crawler                      3651427    627714540    259430754242 ...but when I go to the GUI of that device and check the ACC page, I see a very different set of applications (no matter if I sort on sessions or bytes). For example, facetime, google-video-base and mozy do not appear in the ACC. The top apps shown in the ACC are typically ones like web-browsing or ssl, which don't appear with the CLI command. Does anyone else have this same situation? Is the a reason for the differences? Thanks ... View more

We have an AD account for which we restrict all Internet access via a user-based security rule. The account is an auto-logon account for certain kiosk-type machines in our environment. I'm finding that the username being used on the machine is not always recognized by PA, and as a result Internet traffic is being allowed. There are other times when it recognizes that account and properly blocks Internet access. Does anyone know why there are times that the username is not known to PA, and is there anything I can do to fix that? Thanks ... View more