cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

About tpmeier

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
tpmeier
‎01-18-2019
since ‎10-12-2018
L0 Member
User Activity
User Profile
User Badges
Public Statistics
Date Registered ‎10-12-2018 01:47 AM
Date Last Visited ‎01-18-2019 08:34 AM
Total Messages Posted 3

URL Filtering - TLS 1.3 Website

by in General Topics
‎01-03-2019 08:26 AM
‎01-03-2019 08:26 AM
Hi, I am new to Palo Alto Firewalls and am in the middle of testing some of the functionalities provided. One of which is URL Filtering.   I have been able to clone the default URL Filtering Profile. I then added a website to the blocked list. Then assigned the profile to a security policy. And it worked.   I found this knowledge base article confirming URL for HTTPS is determind by checking certificate: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRZCA0 "For HTTPS traffic, since this protocol is being encrypted, the firewall usually looks at data inside the Server Certificate that is presented to the client during the SSL handshake. In the case of decryption, this traffic will be treated as normal HTTP traffic when it comes to identifying the category."   Why are URLs for TLS 1.3 recognized? With TLS 1.3  (as far as I understand) the certificate itself is not transferred in plain text anymore?   Happy to hear from you guys soon, Regards Eve   ... View more

Re: Traffic Logs - Resolve Hostname - Micrsoft Public IPs

by in General Topics
‎11-29-2018 08:59 AM
‎11-29-2018 08:59 AM
Hi, I understand what you mean. As mentioned hostname - even if it can be resolved - will often not be very helpfull in case of Microsoft, Google and others. Thats why I am wondering if the organisation name could be displayed:  https://www.whois.com/whois/172.217.3.68   I suppose Palo Alto cant so I am wondering if there is any way I could "teach" Palo the Information I need. For example this List of Public IP Range Microsoft uses I found: https://www.microsoft.com/en-us/download/details.aspx?id=53602   btw thanks for all the fast replies 🙂 Regards, Eve Meier ... View more

Traffic Logs - Resolve Hostname - Micrsoft Public IPs

by in General Topics
‎11-29-2018 08:29 AM
‎11-29-2018 08:29 AM
Dear Commuity, I am very new to Palo Alto Firewalls. I saw, that you can check the "Resolve hostname" checkbox when viewing Traffic Logs. Sadly a lot of IPs are not being resolved. I examed a few random samples and notices, the IPs mostly belong to Microsoft.   I am now wondering, if there is some kind of way, that I could see this in Traffic Log directly. I dont necessarily need a hostname. I am happy if I would be able to display organization name behind the IP.   Regards, Eve Meier ... View more
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎01-18-2019 08:34 AM
Latest Tags
No tags yet
Likes Given To
View All
Latest Blogs
Latest Posts
Privacy Policy Terms of Use
Copyright 2007 - 2021 - Palo Alto Networks