https://live.paloaltonetworks.com/t5/panorama-discussions/how-to-block-randomly-generated-urls/m-p/515800#M1118 <P>Hello&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/190117">@Greg_Majersky</a></P> <P>&nbsp;</P> <P>thank you for the post!</P> <P>&nbsp;</P> <P>If you mean newly registered domains (NRD) / DGA, then PAN-DB has a URL filtering category called: "newly-registered-domain". You can set the action to block to block these URLs.</P> <P>&nbsp;</P> <P>If you have DNS Security subscription, then you can block these domains as well:&nbsp;<A href="https://live.paloaltonetworks.com/t5/blogs/new-strategically-aged-domain-detection-for-dns-security/ba-p/459627" target="_blank">https://live.paloaltonetworks.com/t5/blogs/new-strategically-aged-domain-detection-for-dns-security/ba-p/459627</A></P> <P>&nbsp;</P> <P>If you are referring to different URL categories or different case, could you please share more details about issue you are facing? Ideally, if you can share a few samples of these URLs.</P> <P>&nbsp;</P> <P>Kind Regards</P> <P>Pavel</P> Fri, 23 Sep 2022 10:30:02 GMT PavelK 2022-09-23T10:30:02Z https://live.paloaltonetworks.com/t5/panorama-discussions/how-to-block-randomly-generated-urls/m-p/515738#M1117 <P>We are seeing alot of urls with randomly generated urls getting past our existing guards.&nbsp; Is there a rule, plug-in or ?? that could deny urls that don't match known word patterns?<BR /><BR />Thank you</P> <P>&nbsp;</P> <P><LI-PRODUCT title="Panorama" id="Panorama"></LI-PRODUCT></P> <P><LI-PRODUCT title="NGFW" id="NGFW"></LI-PRODUCT>&nbsp;</P> <P><LI-PRODUCT title="AIOps for NGFW" id="AIOps-for-NGFW"></LI-PRODUCT>&nbsp;</P> Thu, 22 Sep 2022 20:28:32 GMT https://live.paloaltonetworks.com/t5/panorama-discussions/how-to-block-randomly-generated-urls/m-p/515738#M1117 Greg_Majersky 2022-09-22T20:28:32Z https://live.paloaltonetworks.com/t5/panorama-discussions/how-to-block-randomly-generated-urls/m-p/515800#M1118 <P>Hello&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/190117">@Greg_Majersky</a></P> <P>&nbsp;</P> <P>thank you for the post!</P> <P>&nbsp;</P> <P>If you mean newly registered domains (NRD) / DGA, then PAN-DB has a URL filtering category called: "newly-registered-domain". You can set the action to block to block these URLs.</P> <P>&nbsp;</P> <P>If you have DNS Security subscription, then you can block these domains as well:&nbsp;<A href="https://live.paloaltonetworks.com/t5/blogs/new-strategically-aged-domain-detection-for-dns-security/ba-p/459627" target="_blank">https://live.paloaltonetworks.com/t5/blogs/new-strategically-aged-domain-detection-for-dns-security/ba-p/459627</A></P> <P>&nbsp;</P> <P>If you are referring to different URL categories or different case, could you please share more details about issue you are facing? Ideally, if you can share a few samples of these URLs.</P> <P>&nbsp;</P> <P>Kind Regards</P> <P>Pavel</P> Fri, 23 Sep 2022 10:30:02 GMT https://live.paloaltonetworks.com/t5/panorama-discussions/how-to-block-randomly-generated-urls/m-p/515800#M1118 PavelK 2022-09-23T10:30:02Z