News for hackers. Stuff that matters.

A comment on Palo Alto Networks sends cease-and-desist letter to take down review videos. Parent comment

Re:Palo Alto Networks sends cease-and-desist letter to take ... by warhorse10_9 on Tuesday October 20, 2020 @06:31PM (#24842980)
I posted this in a comment response below.

All of these things are actually configured by the company/library you are connecting to. They are configuration options for the firewall that are enforced by global protect. Blame your library IT, not Palo Alto.

[ Parent | on HN ]
Re:Palo Alto Networks sends cease-and-desist letter to take ... by shrubble on Tuesday October 20, 2020 @09:17PM (#24843979)
Have you yourself used the interface for configuration of these options?

How easy is it for a non-expert to determine what the vpn client will or will not do, once deployed?

[ Parent | on HN ]
Re:Palo Alto Networks sends cease-and-desist letter to take ... by bnjms on Tuesday October 20, 2020 @10:08PM (#24844194)
It isn’t. You will have to speak with the IT staff to understand how they have it configured. If you have an issue with this use a third party open source client.

The point is, any enterprise client is expected to have these features. Don’t install them on your personal laptop if you have a problem with what is expected behavior.

[ Parent | on HN ]
Re:Palo Alto Networks sends cease-and-desist letter to take ... by musicale on Tuesday October 20, 2020 @11:31PM (#24844513)
> The point is, any enterprise client is expected to have these features

"Features" seems like an excessively charitable word to describe spyware/malware-like behavior.

Expected by whom? Certainly not library patrons. On the contrary, library patrons expect their privacy to be protected.

http://www.ala.org/advocacy/privacy

[ Parent | on HN ]
Re:Palo Alto Networks sends cease-and-desist letter to take ... by asdfasgasdgasdg on Tuesday October 20, 2020 @11:48PM (#24844581)
> Expected by whom?

By the people who pay Palo Alto Networks.

[ Parent | on HN ]
Re:Palo Alto Networks sends cease-and-desist letter to take ... by msh on Wednesday October 21, 2020 @12:23AM (#24844723)
No, people who pay for Spyware to spy on their employers / users.
[ Parent | on HN ]
Re:Palo Alto Networks sends cease-and-desist letter to take ... by warhorse10_9 on Wednesday October 21, 2020 @01:02AM (#24844883)
Let's lay this out. Let's say you are a government IT shop (it doesn't matter what level, state, nation whatever), or a bank, or a hospital, you are required by law to control how data is processed on your network. Therefore you must monitor compliance for devices connecting to your network. This is what GlobalProtect was designed for. It can be used in less restrictive environments, but the IT shop should make sure to audit the rules and policies of the client to not be overly burdensome on users. Palo Alto has numerous courses to train IT professionals to configure their products. It is on the IT professionals to configure the services correctly.
[ Parent | on HN ]
Re:Palo Alto Networks sends cease-and-desist letter to take ... by brendoelfrendo on Wednesday October 21, 2020 @01:44AM (#24845081)
Right, Global Protect is great in regulated environments. You can turn on its always on functionality and devices can then be used while connected to VPN or not at all. If that setting is configured in an environment where users are connecting their personal devices, it's misconfigured, pure and simple.
[ Parent | on HN ]
Re:Palo Alto Networks sends cease-and-desist letter to take ... by asdfasgasdgasdg on Wednesday October 21, 2020 @01:37AM (#24845041)
Right. The people who pay Palo Alto Networks, in other words.
[ Parent | on HN ]
Re:Palo Alto Networks sends cease-and-desist letter to take ... by warhorse10_9 on Wednesday October 21, 2020 @01:04AM (#24844893)
Yes, I have. That interface is not for non-experts. It is for the IT professionals configuring the portal.
[ Parent | on HN ]