I had created a custom URL category (for specific tiny url let say *.tinyurl.com/) & in the url filtering profile I had opted for option to continue for this custom url category to make user acknowledge the action & log the event. but the caveat here is I see the user being going to the palo alto continue page but sometimes he can seamlessly go to the website without the pan conitue page. Also i see sometime see a chrome/firefox page saying
i had even enabled ssl decrytption to for the user so that user gets conitnue page even if its http/https.(is this step needed?) but having the same issue.
That suggests to me that when the user goes to site the traffic is hitting another rule. Suggest you tighten your rules to make sure its not hitting an allow rule.
The continue page is a category-based timer. Once the user hits the continue button, they can browse to that category without getting the continue page again for 15 minutes (I think). Could the traffic you're seeing be in that window of time?
You can use the URL response pages, including continue, without a full blown decryption environment, but it is still technically decrypting:
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!