topic Re: Allow specific URL from being processed by data filter in General Topics

Allow specific URL from being processed by data filter

kmckinzie — Tue, 12 Nov 2013 16:49:24 GMT

Is this possible?

Re: Allow specific URL from being processed by data filter

kadak — Tue, 12 Nov 2013 17:02:26 GMT

Hello Mckinzie,

If you are looking to block a URL filtering category but allow a specific URL that belongs to that category, here is how you would do it:

In the following screenshot, social networking category is blocked but facebook.com is allowed.

The order of precedence taken:

Block list
Allow list
custom categories
pre-defined categories

I hope I understood your question.

Thanks and regards,

Kunal Adak

Re: Allow specific URL from being processed by data filter

kmckinzie — Tue, 12 Nov 2013 19:14:05 GMT

The response is not what I am looking for. It is more toward the data filtering side. The data filtering probably needs to be configured better. As fast fix without turning data filtering completely off for SSN, I was wanting to bypass a specific supplier URL that has data in the form of SSNs but are not.

Re: Allow specific URL from being processed by data filter

kadak — Tue, 12 Nov 2013 19:40:34 GMT

Hello Mckinzie,

Now that I have understood your concern, as far as creating a URL exception for a data filtering profile is concerned, PAN firewall currently doesn't have the capability to do that. However, what you can can try is create another security rule -- without the data-filtering profile applied to it and a URL filtering profile with that specific URL mentioned in the allow list and place it on top of the existing rule which has the data-filtering profile. In that way, whenever the traffic concerned with that specific URL hits the firewall, it will only match a new rule which doesn't have the data-filtering profile.

OR, the regex pattern itself needs to re-configured to avoid those SSN false-positives.

Let me know what do you think about the workaround.

On another note, if you think this feature would be valuable addition, you can submit a feature request through your account's SE to our development team

Thanks and regards,
Kunal Adak.

Re: Allow specific URL from being processed by data filter

kmckinzie — Tue, 12 Nov 2013 20:03:39 GMT

Okay thanks. I will modify security rules with a hierarchy of the supplier URL filter on top.