topic Re: URL Filtering Whitelist in General Topics

URL Filtering Whitelist

L1_ENG — Mon, 27 Jan 2020 07:42:46 GMT

Hi,

We have a case that 1 user would like to access URL (example a.com) that is currently blocked in existing URL filtering profile.

We know we can allow this by

1. clone existing URL profile and add a.com into allow list or add it through custom URL.

2. create firewall policy above existing rules to internet to allow this specific user id / IP address and attach the new URL profile

Let's say in the future there is a request to whitelist different user to a different URL, does it mean I have to create multiple URL profile or is there a better way to do this?

can anyone share their experience..

thanks!

Re: URL Filtering Whitelist

kiwi — Mon, 27 Jan 2020 08:23:15 GMT

Hi @L1_ENG ,

You listed the 2 options I would use.

Cheers,

-Kiwi.

Re: URL Filtering Whitelist

RobinClayton — Mon, 27 Jan 2020 13:05:22 GMT

Yes multiple URL's Lists and Multiple Rules are required if you need to be 100% granular in your white listing.

Also be aware that any one site may pull assets from other sites that are not white listed. and therefore content may not show correctly.

Re: URL Filtering Whitelist

OtakarKlier — Wed, 29 Jan 2020 22:52:35 GMT

Hello,

What I did was one of the options you mentioned. I have a custom URL category and list the URL. Then create a security policy and make sure that I dont just add the user, i add an AD group. That way in the future I just have to add users to the AD group.

But yes it will be a new Custon URL category and security policy for each different request. I find that if users have to get C-Level approval, they usually dont ask ;).

Regards,

Re: URL Filtering Whitelist

L1_ENG — Thu, 30 Jan 2020 05:32:51 GMT

Hi @OtakarKlier

Thank your for your feedback,

am I correct to assume you are allowing using service and URL category on security policy without URL filtering security profile

and you also have a generic internet rule below that rule that is using URL filtering security profile?