URL filtering sequence in Panos 9.0

Deepak_K — Fri, 22 May 2020 07:07:07 GMT

We are going to upgrade the PAN NGFW from 8.1 to 9.0

I have below queries

case 1 : if we have below setting in URL filtering profile will be able to block facebook.com ?

custom category_block* - facebook.com - block

custom category_allow* - facebook.com - allow

predefined category - social networking - block

case 2 : if we have below setting in URL filtering profile will be able to block facebook.com ?

custom category_block* - facebook.com - block

predefined category - social networking - allow

case 3 : if we have below setting in URL filtering profile will be able to block facebook.com ?

custom category_allow* - facebook.com - allow

predefined category - social networking - block

case 4 : if we have below setting in URL filtering profile will be able to block facebook.com ?

custom category_block* - facebook.com - block

custom category_allow* - facebook.com - allow

predefined category - social networking - allow

I am asking this query because behavior is changed for url filtering override in PANos 9.0

Re: URL filtering sequence in Panos 9.0

OtakarKlier — Fri, 22 May 2020 22:02:16 GMT

Hello,

Are you trying to block facebook? If yes then remember that the custom URL categories work ahead of the predefined ones.

Regards,