topic Re: URL Identification in General Topics

URL Identification

hbshin — Fri, 14 Jun 2019 03:39:31 GMT

i have a question about URL Identification.

i use url object in security policy and no use ssl decryption

if no SNI is present and there is no CN enrty,

how can identify URL?

thanks.

Re: URL Identification

kiwi — Fri, 14 Jun 2019 06:52:28 GMT

Hi @hbshin ,

The categorization is done either by IP address or via the Common Name from the SSL certificate or Server Name Indication (SNI).

URL Categorization of SSL Websites

Cheers !

-Kiwi

Re: URL Identification

hbshin — Fri, 14 Jun 2019 07:37:52 GMT

Hi @kiwi

Thank you for your reply.

i understood SNI and CN Name

Could you explain more about The categorization by IP Address ?

How are URLs categorized by IP address?

Thanks.

Re: URL Identification

kiwi — Fri, 14 Jun 2019 10:00:52 GMT

Hi @hbshin ,

How PAN-DB works

The PAN-DB Core, located in the Palo Alto Networks threat intelligence cloud, has a full URL and IP database to cover web security needs.

Millions of URLs and IPs are classified in a variety of ways. In addition to the “Multi-language classification engine” and the “URL change request from users,” PAN-DB receives malicious URL and IP information from WildFire.

Cheers !

-Kiwi.