Configuring URL filtering from command line

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Configuring URL filtering from command line

L4 Transporter

Hi all,

Just wondered if anybody knew of a quick way to apply the same action to all categories within an URL filter please?

It's not the end of the world if it can't be done, it just seems to me that a wildcard option would be useful.

For example, if I wanted to create a URL filtering profile called "minimal" which just allows 3 categories, I would like to be able to do something like this:

set profiles url-filtering minimal block *

set profiles url-filtering minimal alert [ business-and-economy computer-and-internet-info computer-and-internet-security ]

At the moment it seems that every category defaults to "allow" unless you specifically configure each category otherwise.

Again, not the end of the world if it can't be done - just might save me a bit of time! Smiley Happy

Any help would be appreciated.

Thanks,

Dave

4 REPLIES 4

L4 Transporter

Sorry, forgot to say I'm running 4.0.3 on a PA-500

Thanks,
Dave

Dave

At this point it does not appear that there is a wild card feature on the command line for the url profile. Though that would be nice to have in the policy section. The following command line will configure all of the other categories to block by default:

set profiles url-filtering minimal block [ abortion alcohol-and-tobacco auctions content-delivery-networks cult-and-occult dead-sites dynamically-generated-content educational-institutions entertainment-and-arts financial-services games government health-and-medicine image-and-video-search individual-stock-advice-and-tools internet-communications internet-portals job-search keyloggers-and-monitoring legal local-information military motor-vehicles news-and-media not-resolved online-greeting-cards online-music online-personal-storage open-http-proxies parked-domains personal-sites-and-blogs philosophy-and-political-advocacy phishing-and-other-frauds private-ip-addresses proxy-avoidance-and-anonymizers real-estate recreation-and-hobbies reference-and-research religion search-engines sex-education shareware-and-freeware shopping social-networking society spam-urls sports streaming-media training-and-tools translation travel unconfirmed-spam-sources unknown web-advertisements web-based-email web-hosting ]

It would be nice to have a default action option at the command line when configuring actions with multiple options like this.

Hope that helps.

James

Hi James,

Thanks for your message.

I have been configuring each category action explicitly in policies in a similar manner to your example and this works ok.  I was just surprised that there wasn't a neater way.

I'm not sure how often new categories come along.  If I only want to ever allow categories x y and z and block everything else then I guess I just need to make sure my list is always up to date, otherwise any new categories would be allowed.

Please could we could add category wildcards to the features request list Palo Alto?

Many thanks
Dave

Hi Dave,

Thanks for your feedback!  Generally speaking, new categories are rarely added (though they can be, if genuinely necessary), so hopefully this is a one-time setup issue for you (unless you need to change your URL filtering profile).

That said, you are always welcome to contact your sales rep to have feature requests submitted.

Thanks,

Doris

  • 2351 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!