how to block UNKNOWN url category

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

how to block UNKNOWN url category

L2 Linker

how to block UNKNOWN url category on PA 5050.

tddmwwnnowxo.com  is unknow url category  so PA URL DB allowed  into my network.  How to block unknown category.


If we block unknown category will it affect any new urls which is not register in PA URL DB

2 REPLIES 2

Cyber Elite
Cyber Elite

Objects > Security Profiles > URL Filtering

Create new URL filtering profile.

Change "action" for every category according to your company policy.

Policies > Security

Open security policy that allows your users to browse the web.

Under Actions tab you can attach URL filtering profile (Profile Settings).

If new url is registered it is unknown initially until Palo Alto Networks classifies it.

If your users need to access it then you can add it to whitelist and request category change.

When it is regategorized then you can remove it from whitelist.

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

L7 Applicator

Before blocking unknown you should run a report and take a look at how much unknown category URL traffic you have and take a look at a sampling of the sites.

As Raido mentioned, users will be blocked so they will contact the help desk or information you have on the block page.  You will need to judge if the added work for maintaining the white list and the user impact of delays in web use will be worth the added security for your particular company.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
  • 2635 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!