topic Re: allow specific website to only one user in General Topics

allow specific website to only one user

thomas_hoch — Fri, 07 Mar 2014 08:06:17 GMT

hello,

i am new to our paloalto firewall, We have a problem with some „special“ employees, they want to connect to a „normally“ blocked-for-all website, for example „facebook.com“. How we can allow this specific, normally blocked website, to this and only this person?

I added the site under

- URL-Filtering/“Allow-List“

and under

- Custom URL Category/ i created “URL-sitename-allow“ here i added the site(s) for the exclude

Is this the right way or is there a shorter/faster way to reach the goal.

Thank you for your help

thomas

Re: allow specific website to only one user

Retired Member — Mon, 10 Mar 2014 15:38:40 GMT

You can use the Url security profile which matches to related traffic.

Using allow list will work.

https://live.paloaltonetworks.com/docs/DOC-3402

Re: allow specific website to only one user

mbutt — Tue, 11 Mar 2014 00:04:35 GMT

Here is the step by step break down

1. Create a customer URL category.

2. Create a URL profile and allow that customer URL category.

3. Make sure that userID feature is enabled. Below is the link which shows how to configure userID

User Identification Tech Note - PAN-OS 4.0

User Identification Tech Note PAN-OS 4.1

4. Create a security policy for those users, using that URL profile for them.

This will allow those users to surf the websites which are blocked for others.

Thank you

Numan