topic Re: allow single url in General Topics

allow single url

lauro7 — Fri, 05 Oct 2012 17:52:08 GMT

Hi,

on URL-filtering how can I allow a single URL (i.e. docs.google.com) and block all the others ?

Thanks.

Re: allow single url

ppatel — Fri, 05 Oct 2012 18:01:20 GMT

Keep the URL in the explicit Allow list under Objects > URL filtering profile and block the rest of the URLS.

Go through this document for the details of URL filtering order.

https://live.paloaltonetworks.com/docs/DOC-2731

Regards

Parth

Re: allow single url

ppatel — Fri, 05 Oct 2012 18:17:28 GMT

Also I see that docs.google.com falls in "online-personal-storage" category

You can block that category but just allow docs.google.com in the Explicit allow list.

Furthermore,for ssl websites, It is not possible to tell what protocol is inside without SSL Decryption so the categorization is done either by IP or via the Common Name from the SSL certificate.

Regards

Re: allow single url

sdurga — Fri, 05 Oct 2012 20:17:01 GMT

If you are trying to block/allow docs.google.com only then URL filtering will not work for you as this will be an encrypted web site. But, you have a way to block docs.google.com. Paloalto has an application to detect google-docs and it is called "googel-docs". In the security rule you have to allow this application. You can do this as below. CLICK on the image.

Thanks,

Sandeep T

Re: allow single url

lauro7 — Mon, 08 Oct 2012 06:50:17 GMT

I have tried so, but it doesn't work, perhaps because ssl is involved ?

Re: allow single url

lauro7 — Mon, 08 Oct 2012 07:00:13 GMT

If I block the "online-personal-storage" category, it's not enough. My focus is to allow "docs.google.com" and block all others, all the categories. Have I to block all categories, category by category ? Is there a more simple way ?

Thanks.

Re: allow single url

ppatel — Mon, 08 Oct 2012 07:13:59 GMT

You would have to turn on SSL decryption for SSL encrypted websites, when using URL filtering or to detect some applications (for example face-book chat, posting etc).

You can block all the categories together by clicking down arrow key as shown below.

Regards

Parth

Re: allow single url

Sobolenko — Fri, 24 Apr 2015 17:40:47 GMT

What if you will create custom category and add docs.google.com in it and then apply it to the security policy? You can also check "Container Pages" to limit access to exactly specified URL.