topic Allowing Mapquest in General Topics

Allowing Mapquest

EricJRein — Tue, 14 Nov 2017 17:43:22 GMT

Greetings,

One of my departments is requesting access to Mapquest for their users. Currently they have limited Internet access. I have added *.mapquest.com/ and it brings up a very limited webpage (no links). So I did some searching and found that Mapquest also uses a hosting site called mqcdn so i added *.content.mcqdn.com/ in as well. I was able to pull up more content, however, not eveything is working as it should. Has anyone else run into this issue and/or know of a way to allow full access?

Re: Allowing Mapquest

tcasw86 — Tue, 14 Nov 2017 20:46:36 GMT

I'm curious about this as well. I have run into similar issues where clients want to whitelist a specific set of websites and block everything else. The only work around I found (like you) was to inspect the HTML and allow those links too, which is a poor solution if the webpage is ever updated. I found no option to allow embedded content.

TAC recommended category filtering, but this did not meet the customers secuirty requirements.

Re: Allowing Mapquest

dannon — Tue, 14 Nov 2017 21:55:42 GMT

I experienced similar issues. We have a group of users with access to only a few websites. In order for them to display properly, I had to watch each one in the logs and also whitelist all the other linked sites like CDN URLs, etc.

It worked, but took time, but I got hit up for it a week later because there was a spot on the webiste I didn't go to that had another URL I needed to whitelist.

Terrible pain in the bum for sure.

Whish there was a more elegant way.

Dannon

Re: Allowing Mapquest

EricJRein — Wed, 15 Nov 2017 14:48:11 GMT

Thanks for the responses! I "inherited" our Palo Alto's just four months ago (with no prior experince with them) and overall have been impressed with them. This is one area that I feel needs improving though.

Also on the topic of URL Category is it possible to use IP addresses and not actual URL's when filtering websites? When I monitor the traffic for a site such as Mapquest I see several IP addresses being blocked but the "Resolve Hostname" feature does not always work for every address.