Lookup URL in Custom Categories

c_luck — Wed, 16 Jan 2013 14:09:20 GMT

I'm currently trying to verify a list of URLs is blocked in my configuration. So far I have tried the following commands:

test url <URL>

and

test custom-url url <URL> rule <rule name>

The first command returns what the site is classified as by Brightcloud. The second command does not return any output.

Is there a way to look up a URL to see if it matches a Custom Category?

As an example if I put *.google.com in a custom category called Disallowed and I ran the following commands on the firewall:

test url www.google.com

Gives the output "www.google.com search-engines (Base db)"

test custom-url url www.google.com rule default-access

Gives no output to the screen at all

I'm running PAN OS 4.0.7

Thanks!

Re: Lookup URL in Custom Categories

kiwi — Wed, 16 Jan 2013 17:21:54 GMT

Hi,

It seems it is not picking up that wildcard.

I tested the same in my lab (4.1.9). Got the same result with the wildcard but putting 'www.google.com' in the custom category returned the expected custom category :

admin@PA-500> test custom-url rule rule1 url www.google.com

Custom category matched: blah, action: alert

EDIT : Actually it does work on my LAB ... I messed up my previous lab config.
However, after correcting it does return the correct result using a wildcard :

<custom-url-category>
              <entry name="blah">
                <list>
                  <member>*.google.com</member>
                </list>
                <description>blah</description>
              </entry>
            </custom-url-category>

admin@PA-500> test custom-url rule rule1 url www.google.com
Custom category matched: blah, action: alert

Guessing a PanOS upgrade might just resolve the issue.

-Kim.

Kind regards,

-Kim

topic Lookup URL in Custom Categories in General Topics

Lookup URL in Custom Categories

Re: Lookup URL in Custom Categories