allow single url

[lauro7]

Hi,

on URL-filtering how can I allow a single URL (i.e. docs.google.com) and block all the others ?

Thanks.

[ppatel]

Keep the URL in the explicit Allow list under Objects > URL filtering profile  and block the rest of the URLS.

Go through this document for the details of URL filtering order.

https://live.paloaltonetworks.com/docs/DOC-2731

Regards

Parth

[ppatel]

Also I see that docs.google.com falls in "online-personal-storage" category

You can block that category but just allow docs.google.com in the Explicit allow list.

Furthermore,for ssl websites, It is not possible to tell what protocol is inside without SSL Decryption so the categorization is done either by IP or via the Common Name from the SSL certificate.

Regards

[sdurga]

If you are trying to block/allow docs.google.com only then URL filtering will not work for you as this will be an encrypted web site. But, you have a way to block docs.google.com. Paloalto has an application to detect google-docs and it is called "googel-docs". In the security rule you have to allow this application. You can do this as below. CLICK on the image.

Thanks,

Sandeep T

[lauro7]

I have tried so, but it doesn't work, perhaps because ssl is involved ?

[lauro7]

If I block the "online-personal-storage" category, it's not enough. My focus is to allow "docs.google.com" and block all others, all the categories. Have I to block all categories, category by category ? Is there a more simple way ?

Thanks.

[ppatel]

You would have to turn on SSL decryption for SSL encrypted websites, when using URL filtering or to detect some applications  (for example face-book chat, posting etc).

You can block all the categories together by clicking down arrow key as shown below.

Regards

Parth

[Sobolenko]

What if you will create custom category and add docs.google.com in it and then apply it to the security policy? You can also check "Container Pages" to limit access to exactly specified URL.