topic Re: URL filtering in General Topics

URL filtering

VinceM — Thu, 17 Feb 2011 10:34:42 GMT

hi all,

I am trying to configure Palo alto's URL filtering for allowing user to access web site like mappy. Problem is mappy make request to other web site for displaying photos and others ....

Do you know if it's possible to create a rule using a criteriun like "referrer" in URL filtering ??

eg: allow mappy and mappy referrer

thanks in advance for all you answers.

Re: URL filtering

bpappas — Thu, 17 Feb 2011 14:30:20 GMT

This is not possible in PANOS 3.1.X software.

If you wish to see this feature implemented in a future release you should talk to your Palo Alto Sales team.

-Benjamin

Re: URL filtering

VinceM — Thu, 17 Feb 2011 16:44:37 GMT

Thanks for your answer.

Then how can you implement URL filtering without "referrer" feature ???

Have you to know all allowed web site dependencies ?

Not really usable

Re: URL filtering

kbrazil — Thu, 17 Feb 2011 17:14:38 GMT

If you have a very restrictive URL filtering policy, then you will run into these types of issues and you will have to manually create exceptions or be less restrictive.

The URL Filtering feature simply uses the URI information to block or allow based on how you set your policy. You might be able to accomplish your goal using a custom App-ID with an HTTP decoder. This unlocks all of the HTTP headers and contexts so you can create a more granular signature. This would not take URL category information to account, so you will need to weigh the pros and cons of each method.

Cheers,

Kelly