topic Re: Security Policy with URLs in General Topics

Security Policy with URLs

dstewart65 — Tue, 26 Jun 2012 20:26:43 GMT

Is it possible to create a Security Policy with the Destination address as a URL? I would prefer to use the URL to avoid using the IP in case the destination service changes it.

Thanks,

Dennis

Re: Security Policy with URLs

mharding — Tue, 26 Jun 2012 20:31:37 GMT

Yes, create an address object, use the FQDN from the drop down, and enter your URL.

I believe the refresh job runs every 30 minutes to convert that URL to an IP address.

Re: Security Policy with URLs

mikand — Tue, 26 Jun 2012 20:48:29 GMT

In that case dont forget to add a url-filter aswell for the same FQDN (specially if this is http traffic).

The bad part (security wise) of using FQDN as dstip is that you will rely on what answer the external (compared to the PA itself) dns will bring you.

Re: Security Policy with URLs

dstewart65 — Tue, 26 Jun 2012 21:02:28 GMT

Thanks, creating the address object worked.

Re: Security Policy with URLs

dstewart65 — Tue, 26 Jun 2012 21:03:57 GMT

This is not http traffic, it's secure FTP (as best it can be) on uncommon ports. I will keep the url-filtering underadvisement.

Thanks.