This message was deleted.

We use Palo also but do not have this issue. Can you use wildcards?

We also use Palo no issues.

The FW guy has told me cant use wildcards so i had to get each URL added from the JSON file

Yea where it’s documented it have the other are norm

They will need to do a packet capture on the Palo to see what is being blocked

Nothing should be blocked as they added all the URL's by FQDN from the json file and nothing has changed in that json file for a while and this has been working for months https://fqdnallowlistsa.blob.core.windows.net/fqdnallowlist-commercial/allowlist.json

Recently, I was putting in on-prem Citrix into a Palo Alto firewall shop where Citrix wasn't common. It was tons of work to whitelist stuff. I think it depends on the knowledge level of your networking folks. I was getting different answers from different people depending on which network/firewall dude I was talking to. It's mostly working now, but, from my experience , Palo Alto is great when it's implemented correctly, and a huge PITA when it's not