<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic URL Filtering and CRL Download in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/url-filtering-and-crl-download/m-p/69604#M40344</link>
    <description>&lt;P&gt;We have PA Zone for which we have a very restrcitive URL filter , i.e. lots of categorys are blocked.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;The issue&amp;nbsp; is that when a user in that zone goes to the SSL encrypted site and the browser tries to download the CRL for the SSL certificate it gets blocked becsue the CRL link either falls into Computer and Internet Info or Web Hosting, both of which are blocked.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I cannot put all the CRL in to a white list as this is not pratical , is there a way to implement this correctly so that CRL sites do not get blocked&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Thu, 17 Dec 2015 14:29:54 GMT</pubDate>
    <dc:creator>RC-BHF</dc:creator>
    <dc:date>2015-12-17T14:29:54Z</dc:date>
    <item>
      <title>URL Filtering and CRL Download</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/url-filtering-and-crl-download/m-p/69604#M40344</link>
      <description>&lt;P&gt;We have PA Zone for which we have a very restrcitive URL filter , i.e. lots of categorys are blocked.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;The issue&amp;nbsp; is that when a user in that zone goes to the SSL encrypted site and the browser tries to download the CRL for the SSL certificate it gets blocked becsue the CRL link either falls into Computer and Internet Info or Web Hosting, both of which are blocked.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I cannot put all the CRL in to a white list as this is not pratical , is there a way to implement this correctly so that CRL sites do not get blocked&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 17 Dec 2015 14:29:54 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/url-filtering-and-crl-download/m-p/69604#M40344</guid>
      <dc:creator>RC-BHF</dc:creator>
      <dc:date>2015-12-17T14:29:54Z</dc:date>
    </item>
    <item>
      <title>Re: URL Filtering and CRL Download</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/url-filtering-and-crl-download/m-p/69606#M40345</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I believe this older discussion handles the topic,&amp;nbsp;&lt;SPAN&gt;allowing&amp;nbsp;CRL&amp;nbsp;without any questions asked&lt;/SPAN&gt;&amp;nbsp;:&lt;/P&gt;
&lt;P&gt;&lt;A href="https://live.paloaltonetworks.com/t5/General-Topics/Custom-App-for-CRL-downloads/m-p/46206#M33955" target="_blank"&gt;Custom App for CRL downloads&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Hope it helps.&lt;/P&gt;
&lt;P&gt;-Kim.&lt;/P&gt;</description>
      <pubDate>Thu, 17 Dec 2015 15:09:50 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/url-filtering-and-crl-download/m-p/69606#M40345</guid>
      <dc:creator>kiwi</dc:creator>
      <dc:date>2015-12-17T15:09:50Z</dc:date>
    </item>
  </channel>
</rss>

