topic Re: Filtering On Multiple Brightcloud Categories in General Topics

Filtering On Multiple Brightcloud Categories

shopeman — Thu, 03 Feb 2011 16:22:06 GMT

I have come across a site that has been assigned three categories by Brightcloud. They are Streaming Media, Adult and Pornography, and Internet Communications, in that order. In our setup we allow Streaming Media and Internet Communications but block Adult and Pornography. It would appear that Palo Alto only looks at the first category in the Brightcloud database because it is allowing access to this site. Is there any way to configure Palo Alto to look at all the categories and if any of them are blocked to not allow access to that site?

Re: Filtering On Multiple Brightcloud Categories

fredallee — Thu, 03 Feb 2011 16:44:02 GMT

No, we only use 1 category from BrightCloud. If there are multiple categories associated with a URL, we use the category with the higher confidence score. If you feel that the site needs to be categorized as Adult first, please request a categorization change at: http://brightcloud.com/support/changerequest.php.

Alfred

Re: Filtering On Multiple Brightcloud Categories

ronieto — Thu, 09 Jun 2011 12:01:33 GMT

Where can I find the "reputation score" of each category?

Re: Filtering On Multiple Brightcloud Categories

JKoss — Thu, 09 Jun 2011 18:42:04 GMT

Go to brightcloud.com and look up the site in question. The Reputation index is displayed prominently.

Re: Filtering On Multiple Brightcloud Categories

dyang — Fri, 10 Jun 2011 00:19:47 GMT

Hello,

While BrightCloud provides a reputation score for URLs, the Palo Alto Networks URL filtering engine does not utilize this score in policy. If this is a feature you'd like to see, please contact your SE to file a feature request.

Hope this helps,

Doris

Re: Filtering On Multiple Brightcloud Categories

networkadmin — Sun, 12 Jun 2011 13:27:35 GMT

dyang wrote:

Hello,

Hope this helps,

Doris

In that case, if a URL is in multiple categories, how dows the PAN "decide" which to apply an action on please?

Re: Filtering On Multiple Brightcloud Categories

dyang — Mon, 13 Jun 2011 18:41:00 GMT

As Alfred stated above, we only use one category from BrightCloud. If a URL gets categorized with multiple categories, we use the one with the highest confidence score. If you do a categorization check via BrightCloud's website, this is generally the first category that's listed.

--Doris