topic Re: Custom URL to match allow policy matches halfway through URL in Next-Generation Firewall Discussions

Custom URL to match allow policy matches halfway through URL

joshuahill9 — Tue, 02 Apr 2024 20:45:51 GMT

Custom URL category containing one line similar to this:

abc.com/string1-string2/string3-string4/string5

After the domain name are a series of strings with some dashes and forward slashes. String5 is meant to be a filename in the string3-string4 directory.

The URL category matches in an allow rule for web-browsing port 80 traffic. No decryption here. No special NAT.

These seem to match the rule:

abc.com/string1-string2<anything>

so basically as long as the firewall reads the end of string2 it matches regardless of anything after string2.

For now it works for our purposes, but we only want to catch a specific file, so, any idea why it would do this?

Thanks in advance for reading. I promise I tried my best to read documentation and previous posts!

Re: Custom URL to match allow policy matches halfway through URL

Raido_Rattameister — Tue, 02 Apr 2024 20:47:54 GMT

So you want it to match for "abc.com/string1-string2/string3-string4/<anything>"?

Use filter:

abc.com/string1-string2/string3-string4/*

And maybe www.abc.com/string1-string2/string3-string4/* as is needed as well.

Re: Custom URL to match allow policy matches halfway through URL

joshuahill9 — Wed, 03 Apr 2024 01:00:08 GMT

No.

These seem to match the rule: abc.com/string1-string2<anything>

But we want exactly this: abc.com/string1-string2/string3-string4/string5

Re: Custom URL to match allow policy matches halfway through URL

joshuahill9 — Wed, 03 Apr 2024 03:06:24 GMT

To put it another way, what should I input so this exact text is matched and nothing else: abc.com/string1-string2/string3-string4/string5 ?

From my reading of the documentation that is exactly what I am supposed to input. I think I do not have to put in regex or an extra slash at the end.