topic Re: how to unblock this sub-url? in General Topics

how to unblock this sub-url?

SThatipelly — Wed, 10 Apr 2019 15:25:16 GMT

I have a URL filtering list with *.github.com in custom blocklist. but I want to allow one specific sub-url https://github.com/abc .

added the sub-url to the custome allow list but didn't work. I'm assuming because of the url filtering order of preference(i.e blockl list first).how can I get this working without creating another security policy?

thanks.

Re: how to unblock this sub-url?

Mick_Ball — Wed, 10 Apr 2019 16:19:10 GMT

I was not aware that the "block list" overides the "allow list".....

I just assumed that the allow should contain *.github.com/abc/*

if not then maybe....

you could add a new custom object url category called Github with *.github.com as the site,

then you could set this to "block" in your url filtering profile and add the overide *.github.com/abc/*, you can then remove the custom block.

Re: how to unblock this sub-url?

OtakarKlier — Wed, 10 Apr 2019 19:08:20 GMT

Hello,

There is a difference between *.github.com and github.com. *.github.com is for anything preceeding the .github.com doimain such as www., ftp, etc. To only allow the gitbub.com/abc site, just enter that URL into your allow list. Then use a predifened catagory to block github, ie shareware-and-freeware = Blocked

Hope that helps.

Re: how to unblock this sub-url?

Mick_Ball — Thu, 11 Apr 2019 11:13:32 GMT

@OtakarKlier thanks for the info...

would gitbub.com/abc allow access to gitbub.com/abc/def/ or would it need to be:-

gitbub.com/abc/*

no, let me ask that again.....

does gitbub.com/abc allow anything after the /abc or do i need the /* for this...

Re: how to unblock this sub-url?

Raido_Rattameister — Thu, 11 Apr 2019 15:24:27 GMT

As step 1 you need to enable ssl decryption to start this working.

Re: how to unblock this sub-url?

SThatipelly — Thu, 11 Apr 2019 15:27:29 GMT

@Raido_Rattameister @Mick_Ball @OtakarKlier Thank you for the responses. I had to put in a decryption rule that decrypts shareware and freeware category and then in another sec policy I have listed the custom url category with github.com/abc/* and set it to allow.