About jambulo

I'm having trouble figuring out what expression to use(in a Custom URL Category) to match any variation of HTTP requests for an entire website.  For example, I want a single expression to be able to match/block/permit the following HTTP requests... example.com/ example.com/path abc.example.com/ abc.example.com/path xyz.abc.example.com/ xyc.abc.example.com/path   So far I've only been able to match all of the above by using 2 expressions in the Custom URL Category... EXAMPLE.COM/ - This will permit example.com/ and any path after it.  Will not permit any subdomains. *.EXAMPLE.COM/ - Will permit abc.example.com/ and any path after it.   Does anyone know of a way to match an entire website using a single expression? ... View more

I'm trying to set up an Internal Gateway for GlobalProtect, and am finding that GP does not connect to the Internal Gateway if the Connect Method is set to "On-demand".  It works just fine if I set it to "Always-on".  Is this the way it's supposed to work or am I missing something? ... View more

We are testing SSL decryption and are finding that Macs are getting a certificate warning page when visiting https://www.apple.com.  The warning says "This website may be impersonating "www.apple.com" to steal your personal or financial information".  These Macs do trust our Root CA, so it's not that.  I put "www.apple.com" in the SSL Decryption Exclusion list and that resolved it.   Anyone know what is causing this warning? Is it certificate pinning? A couple of our Mac testers also reported that they could not download the Big Sur update over GlobalProtect(www.apple.com was not yet in the exclusion list).  Does the Palo need www.apple.com(and maybe others) added to the SSL Decryption Exclusion list in order for Mac updates to work? ... View more