topic Re: Best Practice "Allow New Apps" rule is blocking an URL in Prisma Access Cloud Management Discussions

Best Practice "Allow New Apps" rule is blocking an URL

Ariq_Aziz — Thu, 26 Oct 2023 03:42:40 GMT

Hi Experts

one of our devOps guy use "Postman" and getting connection reset while using the URL" xxx.yy.api.zzzz.io/" (TCP 443)

Log shows Traffic is allowed but URL is getting blocked by the Same RULE called "Allow New App" its a default best practice rule and doesnt allow me to change the URL or add a bypass. What is the best way to overcome this ? I really dont want to add a new rule above this Best practice rule.

Thanks

ARIQ

Re: Best Practice "Allow New Apps" rule is blocking an URL

Sai_Periketi_SMC — Tue, 02 Apr 2024 18:01:46 GMT

Any workaround for this?

Re: Best Practice "Allow New Apps" rule is blocking an URL

Raido_Rattameister — Tue, 02 Apr 2024 20:50:34 GMT

Are you blocking any of the categories listed under "URL Category List" on your first screenshot?

Re: Best Practice "Allow New Apps" rule is blocking an URL

cruhrup — Thu, 09 May 2024 14:41:21 GMT

Hi @Ariq_Aziz,

The URL Category "insufficient-content" is blocked by default for best practices. I've hit this same issue in my home lab (PA-440) with various other API traffic as well as services utilizing CDNs (such as Netflix content). My suggestion would be to create a custom URL category to allow specific traffic through, so the default URL category "insufficient-content" can still block other traffic.

Create a Custom URL Category:
https://docs.paloaltonetworks.com/advanced-url-filtering/administration/configuring-url-filtering/url-category-exceptions/create-a-custom-url-category