topic Re: How to allow policy destination by URL in General Topics

How to allow policy destination by URL

mmarie — Wed, 16 Jun 2021 14:16:19 GMT

Hello,

I need know how to allow create policy in PA firewall 3020 and add destination as URL name as (microsoft office 365) instead of adding all IP ranges.

Appreciate your help

Thanks

Re: How to allow policy destination by URL

MP18 — Wed, 16 Jun 2021 14:35:41 GMT

@mmarie

If it is single url then you can create FQDN under Address and use it in destination in security policy.

You can not use FQDN with wildcard mask.

Regards

Re: How to allow policy destination by URL

OtakarKlier — Wed, 16 Jun 2021 18:47:21 GMT

Hello,

If you have the URL filtering license, just create a custom URL category and set it as the destination.

Hope that helps.

Regards,

Re: How to allow policy destination by URL

Remo — Sat, 19 Jun 2021 05:02:48 GMT

@mmarie for the solution proposed by @OtakarKlier you do not need an URL filtering license.

My recommendation would be to go with a combination of the solutions of @MP18 and @OtakarKlier . Because only with the custom url category at least for a few bytes you theoretically open any destination and there is also the risk that the connection could have the url you want in the http request but is going to a completely different ip address than it actually should be.