Allow specific URL from being processed by data filter

[kmckinzie]

Is this possible?

[kadak]

Hello Mckinzie,

If you are looking to block a URL filtering category but allow a specific URL that belongs to that category, here is how you would do it:

In the following screenshot, social networking category is blocked but facebook.com is allowed.

The order of precedence taken:

1. Block list
2. Allow list                           
3. custom categories 
4. pre-defined categories

I hope I understood your question.

Thanks and regards,

Kunal Adak

[kmckinzie]

The response is not what I am looking for. It is more toward the data filtering side. The data filtering probably needs to be configured better. As fast fix without turning data filtering completely off for SSN, I was wanting to bypass a specific supplier URL that has data in the form of SSNs but are not.

[kadak]

Hello Mckinzie,

Now that I have understood your concern, as far as creating a URL exception for a data filtering profile is concerned, PAN firewall currently doesn't have the capability to do that. However, what you can can try is create another security rule -- without the data-filtering profile applied to it and a URL filtering profile with that specific URL mentioned in the allow list and place it on top of the existing rule which has the data-filtering profile. In that way, whenever the traffic concerned with that specific URL hits the firewall, it will only match a new rule which doesn't have the data-filtering profile.

OR, the regex pattern itself needs to re-configured to avoid those SSN false-positives.

Let me know what do you think about the workaround.

On another note, if you think this feature would be valuable addition, you can submit a feature request through your account's SE to our development team

Thanks and regards,
Kunal Adak.

[kmckinzie]

Okay thanks. I will modify security rules with a hierarchy of the supplier URL filter on top.