<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic URL Category priority in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/url-category-priority/m-p/12341#M9033</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I am wondering what will happen if one URL is in two different categories. Especially if one is configured to block, the other to pass the request.&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;I don't know if this can happen within predefined categories (from BrightCloud), but as i am able to define new ones, its possible to add a already categorized URL in my own category.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Our goal is, to have a global deny and allow category for all of our user groups. Defining the URL's in each of the URL Profile isn't a option, because its easy to get a inconsistency. So i would like to create two new Categories (globalAllow, globalBlock) and add (or remove) my URL's just to this category. To do this, I have to know the behaviour if a URL is in two categories.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Tue, 23 Aug 2011 10:52:53 GMT</pubDate>
    <dc:creator>User_333</dc:creator>
    <dc:date>2011-08-23T10:52:53Z</dc:date>
    <item>
      <title>URL Category priority</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/url-category-priority/m-p/12341#M9033</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I am wondering what will happen if one URL is in two different categories. Especially if one is configured to block, the other to pass the request.&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;I don't know if this can happen within predefined categories (from BrightCloud), but as i am able to define new ones, its possible to add a already categorized URL in my own category.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Our goal is, to have a global deny and allow category for all of our user groups. Defining the URL's in each of the URL Profile isn't a option, because its easy to get a inconsistency. So i would like to create two new Categories (globalAllow, globalBlock) and add (or remove) my URL's just to this category. To do this, I have to know the behaviour if a URL is in two categories.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 23 Aug 2011 10:52:53 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/url-category-priority/m-p/12341#M9033</guid>
      <dc:creator>User_333</dc:creator>
      <dc:date>2011-08-23T10:52:53Z</dc:date>
    </item>
    <item>
      <title>Re: URL Category priority</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/url-category-priority/m-p/12342#M9034</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;The order in which the device checks for URL categories is as follows:&lt;/P&gt;&lt;P&gt;1.&amp;nbsp; Block list&lt;/P&gt;&lt;P&gt;2.&amp;nbsp; Allow list&lt;/P&gt;&lt;P&gt;3.&amp;nbsp; Custom categories&lt;/P&gt;&lt;P&gt;4.&amp;nbsp; Device cache &lt;/P&gt;&lt;P&gt;5.&amp;nbsp; BrightCloud downloaded database&lt;/P&gt;&lt;P&gt;6.&amp;nbsp; Cloud lookup (if enabled)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;That means that if you've included a specific URL in a block list, it will always be blocked, regardless of how it is categorized by BrightCloud.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Hope this helps,&lt;/P&gt;&lt;P&gt;Doris&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 23 Aug 2011 12:46:11 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/url-category-priority/m-p/12342#M9034</guid>
      <dc:creator>dyang</dc:creator>
      <dc:date>2011-08-23T12:46:11Z</dc:date>
    </item>
    <item>
      <title>Re: URL Category priority</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/url-category-priority/m-p/12343#M9035</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks for your answer.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;To sum up: Sites in my own category will always overwrite the BrightCloud (downloaded db and cloud lookup) definition.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Btw: What do you mean with "Device cache"? Cached BrightCloud cloud lookups?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 29 Aug 2011 13:46:31 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/url-category-priority/m-p/12343#M9035</guid>
      <dc:creator>User_333</dc:creator>
      <dc:date>2011-08-29T13:46:31Z</dc:date>
    </item>
    <item>
      <title>Re: URL Category priority</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/url-category-priority/m-p/12344#M9036</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;You are correct - The device cache stores the latest BrightCloud cloud lookups.&amp;nbsp; If you designate an action or category for a URL (either through an allow/block list or custom category), those will always override the BrightCloud category when used in policy.&amp;nbsp; &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Hope this helps,&lt;/P&gt;&lt;P&gt;Doris&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 29 Aug 2011 17:36:40 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/url-category-priority/m-p/12344#M9036</guid>
      <dc:creator>dyang</dc:creator>
      <dc:date>2011-08-29T17:36:40Z</dc:date>
    </item>
  </channel>
</rss>

