topic Re: PA blocks sites that sites use for content delivery in General Topics

PA blocks sites that sites use for content delivery

Retired Member — Fri, 02 Mar 2012 20:52:59 GMT

We have a very strict policy for some computers that only get access to specific sites. However under this model sites such as Wellsfargo use a third party to host their content and data, which then gets blocked as well until we add it to the allow list. Any way to allow these linked sites to get through without being blocked?

Re: PA blocks sites that sites use for content delivery

mikand — Fri, 02 Mar 2012 21:24:15 GMT

There is an URL-category named "CDNs" which you could use for this.

Otherwise you can create your own custom URL-category where you include the CDN's you wish to allow.

Its not uncommon that a site such as "www.example.com" will use "cdn.example.com" as their cdn url (which then points to akami or whatever CDN is being used).

Re: PA blocks sites that sites use for content delivery

uccsitservices — Tue, 06 Mar 2012 16:29:35 GMT

On my 4.1.3 box, the URL category I have is called "content-delivery-networks" not "CDNs". As mikand said, if you need a strict policy, then you should manually add only the CDNs that you need to a custom URL category.

Re: PA blocks sites that sites use for content delivery

mikand — Tue, 06 Mar 2012 18:33:43 GMT

Ahh yes, I didnt have a PA device close by when I wrote that msg but looked at what Brightcloud (which delivers the current url-db to PAN) called it on their site 🙂

http://www.brightcloud.com/support/changerequest.php (have the list of current categories).