topic Re: querying regarding URL filtering profile in General Topics

querying regarding URL filtering profile

Sanssj — Thu, 18 Apr 2019 06:17:48 GMT

I had created a custom URL category (for specific tiny url let say *.tinyurl.com/) & in the url filtering profile I had opted for option to continue for this custom url category to make user acknowledge the action & log the event. but the caveat here is I see the user being going to the palo alto continue page but sometimes he can seamlessly go to the website without the pan conitue page. Also i see sometime see a chrome/firefox page saying

i had even enabled ssl decrytption to for the user so that user gets conitnue page even if its http/https.(is this step needed?) but having the same issue.

Re: querying regarding URL filtering profile

BizBo — Thu, 18 Apr 2019 13:19:08 GMT

That suggests to me that when the user goes to site the traffic is hitting another rule. Suggest you tighten your rules to make sure its not hitting an allow rule.

Re: querying regarding URL filtering profile

gwesson — Thu, 18 Apr 2019 19:01:51 GMT

The continue page is a category-based timer. Once the user hits the continue button, they can browse to that category without getting the continue page again for 15 minutes (I think). Could the traffic you're seeing be in that window of time?

You can use the URL response pages, including continue, without a full blown decryption environment, but it is still technically decrypting:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFKCA0