allow specific website to only one user

[thomas_hoch]

hello,

i am new to our paloalto firewall, We have a problem with some „special“ employees, they want to connect to a „normally“ blocked-for-all website, for example „facebook.com“. How we can allow this specific, normally blocked website, to this and only this person?

I added the site under

• - URL-Filtering/“Allow-List“

and under

• - Custom URL Category/ i created “URL-sitename-allow“ here i added the site(s) for the exclude

Is this the right way or is there a shorter/faster way to reach the goal.

Thank you for your help

thomas

[panos]

You can use the Url security profile which matches to related traffic.

Using allow list will work.

https://live.paloaltonetworks.com/docs/DOC-3402

[mbutt · Accepted solution]

Here is the step by step break down

1. Create a customer URL category.

2. Create a URL profile and allow that customer URL category.

3. Make sure that userID feature is enabled. Below is the link which shows how to configure userID

User Identification Tech Note - PAN-OS 4.0

User Identification Tech Note PAN-OS 4.1

4. Create a security policy for those users, using that URL profile for them.

This will allow those users to surf the websites which are blocked for others.

Thank you

Numan