This message was deleted.
# citrix-cloud
s
This message was deleted.
k
We use Palo also but do not have this issue. Can you use wildcards?
c
We also use Palo no issues.
c
The FW guy has told me cant use wildcards so i had to get each URL added from the JSON file
@Cory Zaner do you have all the Citrix cloud URL's added by FQDN or are you using wildcards on your Palo Alto?
c
Yea where it’s documented it have the other are norm
k
They will need to do a packet capture on the Palo to see what is being blocked
c
Nothing should be blocked as they added all the URL's by FQDN from the json file and nothing has changed in that json file for a while and this has been working for months https://fqdnallowlistsa.blob.core.windows.net/fqdnallowlist-commercial/allowlist.json
o
Recently, I was putting in on-prem Citrix into a Palo Alto firewall shop where Citrix wasn't common. It was tons of work to whitelist stuff. I think it depends on the knowledge level of your networking folks. I was getting different answers from different people depending on which network/firewall dude I was talking to. It's mostly working now, but, from my experience , Palo Alto is great when it's implemented correctly, and a huge PITA when it's not