About Kim_Hansen

Hi @MihaIT ,   Have you tested the following command:   For Install: Start-Process msiexec.exe -Wait -ArgumentList '"c:\Traps_x64_4.2.3.41131.msi"', '/i', '/q', '/l*v c:\traps_install_log.txt' For uninstall: Start-Process msiexec.exe -Wait -ArgumentList '"c:\Traps_x64_4.2.3.41131.msi"', '/x', '/q', '/l*v c:\traps_uninstall_log.txt', 'UNINSTALL_PASSWORD=UninstalNow!'   /Kim  ... View more

Hi mojunhwan,   The best way of blocking naver is by application, but there are other ways as well.   1. Create a security rule that blocks/denies the app  naver-mail. But this rule will maybe require you to have an outgoing decrypt rule to actually see this app over ssl/443. Port 80 would be fine.   Two other ways of blocking naver: 2. Create a FQDN address object called mail.naver.com with FQDN=mail.naver.com and put this in a security rule on destination server with action equal reset-client or reset.both.   3. Create a custom URL-category called "Denied URLs" and but the url *.naver.com in this URL-category. On the outgoing allowed rule for the clients add this URL-category to the URL filtering profil (in the security profile) with a Site Access set to "Block".   - Kim ... View more

Hi Tor, The LDAP search string for this is quite easy: "(&(objectCategory=person)(objectClass=user)(!cn=adm*) (!cn=svc*) )" This filter can be used under User Identification -> Group Mapping -> Server Profile -> User objects The User-ID Best Practice guide also says: "The Group Include List can then be used to filter which groups from the LDAP servers are displayed in the Firewall Policy Interface. This also filters which users are tracked in the firewall logs. If a user does not belong to one of these groups, the firewall will not record the users name in the various logs." https://live.paloaltonetworks.com/servlet/JiveServlet/previewBody/6591-102-5-22672/User-ID_Best_Practices-6.pdf Is this helpful for you? Regards, - Kim ... View more