topic Re: URL list allowed on firewall in General Topics

URL list allowed on firewall

shirishkulkarni — Wed, 21 Feb 2024 07:59:23 GMT

Hi Team,

I need a list of URLs that are allowed through the Palo Alto firewall.

Is there any way to get the URL's name through cli or gui that is allowed through our firewall?

Only allowed url names are require

Re: URL list allowed on firewall

reaper — Wed, 21 Feb 2024 08:23:17 GMT

You can view all the urls being allowed via the URL filtering log

You can also collect the url cache for the most active url's being accessed via your firewall right now:

> show running url-cache all Output into file: dp_url_DB.log > less mp-log dp_url_DB.log

If you want to know which categories are currently being allowed, you'll need to check your url filtering profile that's associated with your outbound web browsing rule (if you don't know which one that is, this is probably a good time to create one 🙂 )

Re: URL list allowed on firewall

shirishkulkarni — Wed, 21 Feb 2024 08:35:05 GMT

The url filtering log shows the current url used.

I need a list of URLs that we allowed in our firewall, as we need to add them to our DNS server.

Can we get those URL names that were allowed in the firewall by us?

Re: URL list allowed on firewall

reaper — Wed, 21 Feb 2024 13:59:51 GMT

you can see which URLs are being access by users from the URL log

you can't collect a list of all the URLs you theoretically allow as these are not publicly available (there are many url filtering categories and listing all URLs for each category is nigh impossible)