topic Re: Palo URL Categorisation process in General Topics

Palo URL Categorisation process

DaMonk — Thu, 28 May 2020 04:54:45 GMT

We have been attempting to use URL Filtering to block access to web based email using the Palo Alto URL Category web-based-email.

We have found however that there are many web based email services that are not included in this category, including one of Australia's Largest ISP's telstra. The url for this service is email.telstra.com. I though it would be easy enough to log a re-categorisation request. But unfortunately the Palo Alto Categorisation process appear to be broken and not have any common sense.

When attempting to access email.telstra.com you are redirected to a generic logon page for tesltra with a url of sigon.telstra.com and because of this the url email.telstra.com can not be categorised as webmail sevice.

Re: Palo URL Categorisation process

kiwi — Fri, 29 May 2020 07:57:13 GMT

Hi @DaMonk ,

Both urls return as category 'Business and Economy'.

Have you tried making a change request on the PAN url filtering page ?

https://urlfiltering.paloaltonetworks.com/

If all else fails you can create a custom URL category as a workaround.

Cheers !

-Kiwi.

Re: Palo URL Categorisation process

shawnhafen — Fri, 29 May 2020 16:51:14 GMT

You have a few options here:

custom URL category for these URLs

block FQDN objects in the destination

Add very clear notes to the URL re-categorization request and hope whoever is working it reads them

FWIW: I have always had great luck with re-categorization requests, sometimes you have to explain in the notes that there is something behind the login or there is a redirect etc