https://live.paloaltonetworks.com/t5/general-topics/test-tld/m-p/289321#M76956 <P>We block the "unknown" category in web browsing. This recently became an issue when an application needed to be accessed by its IP address. If the user hacked his HOSTS file to set the name test.test.test to that IP address, he was able to get to the application.</P><P>&nbsp;</P><P>It looks like any URL with the top level domain of 'test' is allowed as "Computer and Internet info". Is this expected behavior?</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="testtesttest.PNG" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/21492i043965F90646DCB1/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="testtesttest.PNG" alt="testtesttest.PNG" /></span></P> Fri, 20 Sep 2019 13:36:32 GMT DPoppleton 2019-09-20T13:36:32Z https://live.paloaltonetworks.com/t5/general-topics/test-tld/m-p/289321#M76956 <P>We block the "unknown" category in web browsing. This recently became an issue when an application needed to be accessed by its IP address. If the user hacked his HOSTS file to set the name test.test.test to that IP address, he was able to get to the application.</P><P>&nbsp;</P><P>It looks like any URL with the top level domain of 'test' is allowed as "Computer and Internet info". Is this expected behavior?</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="testtesttest.PNG" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/21492i043965F90646DCB1/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="testtesttest.PNG" alt="testtesttest.PNG" /></span></P> Fri, 20 Sep 2019 13:36:32 GMT https://live.paloaltonetworks.com/t5/general-topics/test-tld/m-p/289321#M76956 DPoppleton 2019-09-20T13:36:32Z https://live.paloaltonetworks.com/t5/general-topics/test-tld/m-p/289399#M76971 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/48237">@DPoppleton</a>,<BR />This actually kind of makes sense. The test TLD is reserved for application testing and should never actually resolve to anything that is actually rotatable. If they labeled this as unknown they may break some networks from actually functioning.&nbsp;</P> Fri, 20 Sep 2019 19:52:59 GMT https://live.paloaltonetworks.com/t5/general-topics/test-tld/m-p/289399#M76971 BPry 2019-09-20T19:52:59Z