About mshamsan

Hello,   I want o start setting using Decryption Policy, to Decrypt & Intercept SSL (443) traffic from users when connecting to Internet.   I am wondering, can I use one of the well known Certificate Trusted, e.g., Global Sign by installing it on the Palo Alto  without installing the certificate manually on the users' computers?!   Thank you ... ... View more

Hello,   I have configured a new Security Rule on top (#9 in the picture down) to Block traffic intended to a Custom URL configured in the profile  Block_Files * TOP RULE * Source Zone:                     any Source Address:              any Destination Zone:            any Destination Address:      any   * NEXT RULE * Source Zone:                   Trust Source Address:              10.10.10.10 Destination Zone:            Internet Destination Address:      any       But the problem when I try to connect to the Custom URL defined in  Block_Files  the request goes through the next Security Rule set for 10.10.10.10, i.e., although the traffic or URL is matching the Custom URL defined in Block_Files, but it does not go through nor blocked by the Security Rule on top!!   Is the above Rule valid/correct   Thank you ...   ... View more