About s.williams1

I am trying to design the edge firewall and core network currently and I have a core Layer not in a "stack" or " VSS " so they are  independent Core switches. They are doing the routing to the private WAN, and will be doing the routing to the Edge Firewalls.  ECMP requires a dynamic routing protocol which usually you wouldn't run on an edge firewall, you would just have the core set to default static route to the firewall. That being said not having a Stacked Core to operate as one, I would need each core switch connected to each firewall, so the paths are crossed. If I connect one core switch to one firewall and the other switch to the other firewall then a failure of the primary's firewall connected Core will fail the whole firewall pair over when they really didn't need to be. So I am interested in how others are designing their edge firewalls to the Internet?   Thoughts? Ideas? Caveats?  ... View more

I keep fighting this SSL Decypt issue with my PAs, its almost getting to the point where its not worth running the SSL decrypt function because it causes so many issues. I am currently having issues with people downloading a zip file from git hub.    github.com/Microsoft/vsts-agent/releases/download/v2.117.2/vsts-agent-win7-x64-2.117.2.zip   The error is very simple and I can't seem to get more info on it then just: The page is not secure   But it says valid certificate and secure resources in the developer tools within Chrome.   This is also when comes up when I try this link:   This page isn’t working github-production-release-asset-2e65be.s3.amazonaws.com   unexpectedly closed the connection. ERR_CONTENT_LENGTH_MISMATCH     Is github-base one of the applications that cannot work with ssl decrypt?   ... View more

I have this challenge where I need to allow google play for app downloads but I also know google play is the place for googles streaming services. Has anyone found a way to allow the app downloads but block the streaming of their music and video content? ... View more

How does Palo Alto classify the applications risk level? I am looking into general applications that are used everyday by lots of people that have Risk level 4 and the application research center gives me this:   eventbrite business-systems general-business browser-based   Reasons are:   1 SaaS 1 Transfers Files 1 Used by Malware 1 Vulnerabilities 1 Widely Used   I cannot find anything out there that talks about this application/URL being used for malware at anytime? So where does this come from? ... View more