I have an issue where we at times we block whole domains but we sometimes need to allow one sub-domain through. We recently put in the Palo Alto content filter and we have found it behaves very differently to our previous content filter which read the custom allow list first before proceeding to the block list. I found this article https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClsmCAC which explains that blocks take precedence but this has caused our organisation many headaches because of the way the Palo Alto's performs content filters. I am wondering if there is a way we can still block whole domains but allow only certain sub-domains using the Palo Alto. We have asked our managed service partner but they appear stumped on this one. This is a fairly recent new install of the Palo Alto's and I am hoping we can resolve this issue or be advised if it is not possible at all.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!