topic Re: Comment column for custom url categories? in General Topics

Comment column for custom url categories?

Sec101 — Wed, 15 Jun 2022 20:19:45 GMT

IP lists for edls have:
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/formatting-guidelines-for-an-external-dynamic-list/ip-address-list#idd44a975a-a94a-4398-864e-5cf223f1d351

Is there a way to add a comment to why a specific URL was added into an already existing custom URL category? Like a description for an address object, but a column or way to add some notes as to why a URL was placed into a custom category?

Re: Comment column for custom url categories?

JayGolf — Thu, 16 Jun 2022 02:30:20 GMT

Hi @Sec101 , you can add a "#" in front of text you would like to be comments.

Re: Comment column for custom url categories?

Sec101 — Thu, 16 Jun 2022 13:59:54 GMT

@JayGolf Even on a custom URL category entry?
Ex:
Custom category: Television

Entries:
cbs.com

go.abc.com/*

*.cnn.com/ #comment here? is this how it would work? Assuming you need a space inbetween your entry and the comment area?

just tested
*.cnn.com/ #comment here

it appears that
test custom-url url *.cnn.com/ no longer matches into a category just shows "no custom category matched"

Re: Comment column for custom url categories?

aleksandar.astardzhiev — Tue, 21 Jun 2022 06:00:06 GMT

Hi @Sec101 ,

Have you tried to put the comment above the URL, so to have # at the beginning of the comment line? This will probably tell the firewall to ignore the whole line and move on to the next one.

I have never tried to use comments in URL EDLs, but I am thinking that URL EDL could probably don't support comments because it is using the # and / as special characters when parsing the URL (while such shouldn't be part of normal IP address)

Re: Comment column for custom url categories?

Sec101 — Mon, 27 Jun 2022 16:56:59 GMT

@aleksandar.astardzhiev

I agree with you in that character could be used in the URL. It would be nice ot have something where you could document the change in the list itself (like an address object).