URL Filtering Order of Operations

dan731028 — Tue, 19 Aug 2014 18:37:27 GMT

Could someone tell me the order of operations the firewall uses when evaluating a site for URL Filtering (using PAN-DB if that makes a difference) in terms of how the firewall examines a URL and when it makes a match based on custom url categories, default categories, url filtering block list, and url filtering allow list. I'm wanting to get a better understanding how the firewall does this. I have a scenario where I added *.info to a custom URL category to block this for everyone in my environment. I added a specific url www.mysite.info (for example only. Not real URL) to a custom URL category that I want to allow for everyone in my environment. Even though I did this, the site was still blocked. I added www.mysite.info to to the URL filtering profile allow list and I could then get to www.mysite.info while other .info sites were blocke

What I'm really wanting to know is if the configuration described above is correct, or if there would be a better way to pull off what I am trying to do. I wanted to be able to edit one or two custom URL custom categories instead of touching all of URL profiles.

Thanks!
-D

Re: URL Filtering Order of Operations

hshah — Tue, 19 Aug 2014 18:42:41 GMT

Hello Dan,

Please find bellow document for order.

What order does the PAN use to check for URL categories?

Add following tow in allow list, it will work.

*.mysite.info/

mysite.info/

Regards,

Hardik Shah

Re: URL Filtering Order of Operations

hvcomputech — Tue, 19 Aug 2014 18:55:49 GMT

Remember that if you put it on the allow list, it will be allowed but it won't be logged.

Re: URL Filtering Order of Operations

dan731028 — Tue, 19 Aug 2014 19:14:08 GMT

Thanks,
I knew this info was out there somewhere.

topic URL Filtering Order of Operations in General Topics

URL Filtering Order of Operations

Re: URL Filtering Order of Operations

Re: URL Filtering Order of Operations

Re: URL Filtering Order of Operations