Allowing Mapquest

[EricJRein]

Greetings,

One of my departments is requesting access to Mapquest for their users. Currently they have limited Internet access. I have added *.mapquest.com/ and it brings up a very limited webpage (no links). So I did some searching and found that Mapquest also uses a hosting site called mqcdn so i added *.content.mcqdn.com/ in as well. I was able to pull up more content, however, not eveything is working as it should. Has anyone else run into this issue and/or know of a way to allow full access?

[tcasw86]

I'm curious about this as well. I have run into similar issues where clients want to whitelist a specific set of websites and block everything else. The only work around I found (like you) was to inspect the HTML and allow those links too, which is a poor solution if the webpage is ever updated. I found no option to allow embedded content.

TAC recommended category filtering, but this did not meet the customers secuirty requirements.

[dannon]

I experienced similar issues.  We have a group of users with access to only a few websites.  In order for them to display properly, I had to watch each one in the logs and also whitelist all the other linked sites like CDN URLs, etc.

It worked, but took time, but I got hit up for it a week later because there was a spot on the webiste I didn't go to that had another URL I needed to whitelist.

Terrible pain in the bum for sure.

Whish there was a more elegant way.

Dannon

[EricJRein]

Thanks for the responses! I "inherited" our Palo Alto's just four months ago (with no prior experince with them) and overall have been impressed with them. This is one area that I feel needs improving though.

Also on the topic of URL Category is it possible to use IP addresses and not actual URL's when filtering websites? When I monitor the traffic for a site such as Mapquest I see several IP addresses being blocked but the "Resolve Hostname" feature does not always work for every address.