About edogan

Hello, we have the following issue:   Customer complains, that their web services, that are reachable from the internet through a palo alto firewall, show sporadic breakdown of incoming ssl connections for a couple of minutes. After analyzing the logs on the palo alto, I see in the corresponding time frame log entries with type session "end", but no corresponding logs for session "start". I verified this by filtering on the session ID. The amount of logs with session "start" on the concerned services is very low to zero in the disrupted time frame, but there are numerous with "end" (without start).    The policy was set to logging at start and at the end of the session, and it seems, that this phenomenon occurs only in relation to the issue with the sporadic breakdown of incoming sessions. The issue affects only certain services.   Any ideas as to the cause? PA-5250, PanOS 10.1.5-h1   Many thanks in advance / Best regards Hakan ... View more

Hello, Im using minemeld to get the dynamic address (URLs, IPs) from office 365.   If there are IP addresses, this works without problems via the EDL. In this case the EDL replace the source object. What about addresses that have a wildcard in the URL? These EDLs cannot be selected from the source object and must be saved using the URL pattern filter. In order to allow an access from the Internet from any "*.mircosoft.com" or just "microsoft.com" do I have to set the source ip-address  to "Any" and set all categories except the EDL to block?   How do you allow access from the Internet via URLs?     ... View more