Allow a single URL in a URL filtering policy

[CaptainMiller]

Good morning All,

I have been playing with PA frewalls for a while now but can't seem to find and answer on this.

Is it possible to block all URLS in the block list and then have an allow for one or two allowed URLs (for a public use computer)

I was hoping a wildcard of * in the block list would achieve this - can anyone confirm if they have done this previously?

Alternatively I could probably achieve this using and ACL - I just think it's tidier to do it this way.

Thanks

[Brandon_Wertz]

I don't even use the Allow/Block lists in URL profiles.  If you create a custom URL category; one for allowing to certain sites and one for blocking.  Use those custom categories in the URL profile and set the action you want for each it's much simpler (I think) and you can use that same custom object elsewhere in policy throughout the firewall.

[CaptainMiller]

Thanks, I'll give this a go over the coming weeks.