Find out why Paloalto firewall denied some sessions

Situation: The client has P850 firewall. In reviewing the daily report, they find one computer were denied for some sessions. They want to know why.

Resolution: 1. Find the source IP address, for example 10.0.200.35 in our example.

2. Go to Monitor>Logs>URL Filtering.

3. Search: ( addr.src in 10.0.200.35 ) and ( action eq block-url )

4. it shows: category is games, Application is xbox-live, Action is block-url. It was blocked by Rule Trusted to Internet.

Published by

Bob Lin

Bob Lin, Chicagotech-MVP, MCSE & CNE Data recovery, Windows OS Recovery, Networking, and Computer Troubleshooting on http://www.ChicagoTech.net How to Install and Configure Windows, VMware, Virtualization and Cisco on http://www.HowToNetworking.com