This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About tpmeier
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About tpmeier
01-18-2019
3Posts
0Likes
0Solutions
Jan 18, 2019Last Visited
User
Activity
User
Profile
Latest posts by tpmeier
| Subject | Views | Posted |
|---|---|---|
| 5023 | 01-03-2019 08:26 AM | |
| 1946 | 11-29-2018 08:59 AM | |
| 1960 | 11-29-2018 08:29 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes |
My LIVEcommunity Articles Contributions
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 10-12-2018 01:47 AM |
| Date Last Visited | 01-18-2019 08:34 AM |
| Posts | 3 |
01-03-2019
08:26 AM
Hi, I am new to Palo Alto Firewalls and am in the middle of testing some of the functionalities provided. One of which is URL Filtering. I have been able to clone the default URL Filtering Profile. I then added a website to the blocked list. Then assigned the profile to a security policy. And it worked. I found this knowledge base article confirming URL for HTTPS is determind by checking certificate: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRZCA0 "For HTTPS traffic, since this protocol is being encrypted, the firewall usually looks at data inside the Server Certificate that is presented to the client during the SSL handshake. In the case of decryption, this traffic will be treated as normal HTTP traffic when it comes to identifying the category." Why are URLs for TLS 1.3 recognized? With TLS 1.3 (as far as I understand) the certificate itself is not transferred in plain text anymore? Happy to hear from you guys soon, Regards Eve
... View more
11-29-2018
08:59 AM
Hi, I understand what you mean. As mentioned hostname - even if it can be resolved - will often not be very helpfull in case of Microsoft, Google and others. Thats why I am wondering if the organisation name could be displayed: https://www.whois.com/whois/172.217.3.68 I suppose Palo Alto cant so I am wondering if there is any way I could "teach" Palo the Information I need. For example this List of Public IP Range Microsoft uses I found: https://www.microsoft.com/en-us/download/details.aspx?id=53602 btw thanks for all the fast replies 🙂 Regards, Eve Meier
... View more
11-29-2018
08:29 AM
Dear Commuity, I am very new to Palo Alto Firewalls. I saw, that you can check the "Resolve hostname" checkbox when viewing Traffic Logs. Sadly a lot of IPs are not being resolved. I examed a few random samples and notices, the IPs mostly belong to Microsoft. I am now wondering, if there is some kind of way, that I could see this in Traffic Log directly. I dont necessarily need a hostname. I am happy if I would be able to display organization name behind the IP. Regards, Eve Meier
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks