want to block IP address.

Jafar_Hussain — Mon, 23 Nov 2020 07:36:08 GMT

Dears,

I have one internal working website. i want to allow the website by the URL and want to block by the IP address.

Example:- website name - https://example.com

ip address - 192.168.1.50

If any user browse this website https:// example.com should be open and if the user browse this https://192.168.1.50 should not be open.

For this i have created a 2 URL category:-

1- ACCESS URL- *.example.com

2 - BLOCK IP - *.192.168.1.50

Then I have created a policy scenerio1:-

source zone - TRUST-ZONE

source user - ANY

Destination zone - server zone

destination address - 192.168.1.50

application - ssl

service - application default

service/url category - ANY

Action - Allow

URL Filtering profile :- Allow the "ACCESS URL" category and block the "BLOCK-IP" category.

after this configuration i have checked but not able to block the website by IP address.

Scenario 2 for the security policy:-

source zone - TRUST-ZONE

source user - ANY

Destination zone - server zone

destination address - ANY

application - ANY

service - ANY

service/url category - ACCESS URL

Action - Allow

URL Filtering profile :- block the "BLOCK-IP" category.

But still i am able to access website by the IP address.

PAN-OS- 9.1.2

Can any help me to block this?

Thanks

Re: want to block IP address.

JoergSchuetter — Mon, 23 Nov 2020 07:57:20 GMT

Hello @Jafar_Hussain

Not sure if this only a copy-paste issue. The BLOCK IP URL starts with "*.". The objects do not hold the scheme (http, https, ...). So the URL should simply be "192.168.1.50/"

Re: want to block IP address.

Jafar_Hussain — Mon, 23 Nov 2020 12:11:40 GMT

@JoergSchuetter

BLOCK IP URL category is - https://192.168.1.50/content

you mean in the BLOCK IP category i need to only configure - 192.168.1.50/content instead of *.192.168.1.50/content ?

topic Re: want to block IP address. in General Topics

want to block IP address.

Re: want to block IP address.

Re: want to block IP address.