10-17-2025 08:34 AM
Good morning,
I'm having an issue where AWS sites like *.amazonaws.com and *.awsglobalaccelerator.com are getting regularly categorized as "unknown" and then blocked per our url filtering profiles.
I have confirmed that the connection to the url cloud looks good:
)> show url-cloud status
PAN-DB URL Filtering
License : valid
libcurl resolver : threaded
Current cloud server : serverlist3.urlcloud.paloaltonetworks.com
Cloud connection : connected
Cloud mode : public
URL database version - device : 20251017.20228
URL database version - cloud : 20251017.20228 ( last update time 2025/10/17 10:08:00 )
URL database status : good
URL protocol version - device : pan/2.0.0
URL protocol version - cloud : pan/2.0.0
Protocol compatibility status : compatible
I have also tried adding these domains to the exclusion list under inline categorization in the url filtering profile and I've tried clearing the url cache. These sites still get identified as "unknown" and I've confirmed that they are benign sites. Users report this issue is sporadic. Sometimes even just refreshing the page will allow their traffic to pass.
I don't want aws traffic to simply bypass URL filtering altogether, but I need these sites to not be intermittently blocked.
Anyone run into this? Thanks!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
