URL Filtering Test Pages

Printer Friendly Page

Many of you are wondering, “How do I test to see if our URL Filtering service is enforcing my organization’s policies for malicious and benign URLs properly?”  For benign categories, this is relatively straightforward, you simply visit the website and see if the designed policy is being logged and enforced. 


This works fine for harmless categories, such as web-mail, sports, shopping, etc.  It does get a bit tricky for gray area categories, such as adult as you generally don’t want to visit an adult site at work. You obviously don’t want to actually visit a malicious URL either.

 

We have test URLs for all categories for you to visit. These testing URLs are 100% benign, and have been categorized to their respective categories for testing purposes. 

 

For example, you can visit a test URL for command-and-control.  If you visit:  http://urlfiltering.paloaltonetworks.com/test-command-and-control and if your policy is configured to block-continue access to command-and-control categorized URLs, you will see a blocked-continue page.

 

Screen Shot 2018-01-31 at 1.12.21 PM.png

 

For a non-malicious category such as social-networking, you can visit:  https://urlfiltering.paloaltonetworks.com/test-social-networking and if your policy is to allow access to this category, you will see the following result.

 

Screen Shot 2018-01-31 at 1.14.49 PM.png

Keep in mind, this information will be logged as well, so you can query your logs. 

 

Here is a list of test pages for malicious categories:

http://urlfiltering.paloaltonetworks.com/test-malware

http://urlfiltering.paloaltonetworks.com/test-phishing

http://urlfiltering.paloaltonetworks.com/test-command-and-control

 

Here is a list of test pages non-malicious categories:

http://urlfiltering.paloaltonetworks.com/test-abortion

http://urlfiltering.paloaltonetworks.com/test-abused-drugs

http://urlfiltering.paloaltonetworks.com/test-adult

http://urlfiltering.paloaltonetworks.com/test-alcohol-and-tobacco

http://urlfiltering.paloaltonetworks.com/test-auctions

http://urlfiltering.paloaltonetworks.com/test-business-and-economy

http://urlfiltering.paloaltonetworks.com/test-computer-and-internet-info

http://urlfiltering.paloaltonetworks.com/test-content-delivery-networks

http://urlfiltering.paloaltonetworks.com/test-copyright-infringement

http://urlfiltering.paloaltonetworks.com/test-dating

http://urlfiltering.paloaltonetworks.com/test-dynamic-dns

http://urlfiltering.paloaltonetworks.com/test-educational-institutions

http://urlfiltering.paloaltonetworks.com/test-entertainment-and-arts

http://urlfiltering.paloaltonetworks.com/test-extremism

http://urlfiltering.paloaltonetworks.com/test-financial-services

http://urlfiltering.paloaltonetworks.com/test-gambling

http://urlfiltering.paloaltonetworks.com/test-games

http://urlfiltering.paloaltonetworks.com/test-government

http://urlfiltering.paloaltonetworks.com/test-hacking

http://urlfiltering.paloaltonetworks.com/test-health-and-medicine

http://urlfiltering.paloaltonetworks.com/test-home-and-garden

http://urlfiltering.paloaltonetworks.com/test-hunting-and-fishing

http://urlfiltering.paloaltonetworks.com/test-insufficient-content

http://urlfiltering.paloaltonetworks.com/test-internet-communications-and-telephony

http://urlfiltering.paloaltonetworks.com/test-internet-portals

http://urlfiltering.paloaltonetworks.com/test-job-search

http://urlfiltering.paloaltonetworks.com/test-legal

http://urlfiltering.paloaltonetworks.com/test-military

http://urlfiltering.paloaltonetworks.com/test-motor-vehicles

http://urlfiltering.paloaltonetworks.com/test-music

http://urlfiltering.paloaltonetworks.com/test-news

http://urlfiltering.paloaltonetworks.com/test-nudity

http://urlfiltering.paloaltonetworks.com/test-online-storage-and-backup

http://urlfiltering.paloaltonetworks.com/test-parked

http://urlfiltering.paloaltonetworks.com/test-peer-to-peer

http://urlfiltering.paloaltonetworks.com/test-personal-sites-and-blogs

http://urlfiltering.paloaltonetworks.com/test-philosophy-and-political-advocacy

http://urlfiltering.paloaltonetworks.com/test-private-ip-addresses

http://urlfiltering.paloaltonetworks.com/test-proxy-avoidance-and-anonymizers

http://urlfiltering.paloaltonetworks.com/test-questionable

http://urlfiltering.paloaltonetworks.com/test-real-estate

http://urlfiltering.paloaltonetworks.com/test-recreation-and-hobbies

http://urlfiltering.paloaltonetworks.com/test-reference-and-research

http://urlfiltering.paloaltonetworks.com/test-religion

http://urlfiltering.paloaltonetworks.com/test-search-engines

http://urlfiltering.paloaltonetworks.com/test-sex-education

http://urlfiltering.paloaltonetworks.com/test-shareware-and-freeware

http://urlfiltering.paloaltonetworks.com/test-shopping

http://urlfiltering.paloaltonetworks.com/test-social-networking

http://urlfiltering.paloaltonetworks.com/test-society

http://urlfiltering.paloaltonetworks.com/test-sports

http://urlfiltering.paloaltonetworks.com/test-stock-advice-and-tools

http://urlfiltering.paloaltonetworks.com/test-streaming-media

http://urlfiltering.paloaltonetworks.com/test-swimsuits-and-intimate-apparel

http://urlfiltering.paloaltonetworks.com/test-training-and-tools

http://urlfiltering.paloaltonetworks.com/test-translation

http://urlfiltering.paloaltonetworks.com/test-travel

http://urlfiltering.paloaltonetworks.com/test-unknown

http://urlfiltering.paloaltonetworks.com/test-weapons

http://urlfiltering.paloaltonetworks.com/test-web-advertisements

http://urlfiltering.paloaltonetworks.com/test-web-hosting

http://urlfiltering.paloaltonetworks.com/test-web-based-email

Tags (2)
Comments

These test pages are really useful and we've been using them for a while.


The only problem is - the whole of urlfiltering.paloaltonetworks.com redirects to HTTPS when you access it via HTTP. Thus it's really inconvinient to check whether categorization works correctly both for HTTP and HTTPS (obviously the latter one works only if SSL-decryption is configured for relevant category).

Would it be possible to disabke automatic redirection for test pages (http://urlfiltering.paloaltonetworks.com/test-* ) so that people can separately check categorization for plain-text and SSL traffic?