topic Re: URL FIltering in General Topics

URL FIltering

Marc_Sullivan — Thu, 10 Mar 2022 15:05:40 GMT

I was curious if anyone knows why even when traffic is flagged as a threat by URL filtering there are still packets being sent and received?

Re: URL FIltering

Adrian_Jensen — Thu, 10 Mar 2022 15:56:02 GMT

Two reasons immediately spring to mind (as you didn't specify how many packets):

1) The HTTP/HTTPS session must setup and make the request before the PA can detect the URL being requested, so there will always be some packets before it is blocked. Additionally, multiple requests could be pipelined in an existing session, with the first allowed and a later request flagged.

2) The URL request is being alerted to, not reset/blocked. See whether the URL Filtering group it is detected under is set to Alert vs. Block.

Re: URL FIltering

Marc_Sullivan — Thu, 10 Mar 2022 16:05:47 GMT

Thanks for the response. The URL category is set to block.