We have a custom URL category created to exclude sites from SSL decyption. We have the category set to no decrypt on the firewall but recently we encountered an issue where URLs that we add to the custom object were not getting categorized as such. We talked to PAN TAC and they recommended adding a "/" to the end of the URLs. We tested this and it seems to be working. Just curious if anyone has seen this before? We have never encountered this before with Custom URL Categories.
Have not seen this. Was working with it yesterday, and as you know without Decryption enabled, you cannot even read the full URL; since, the Client Hello provies only the domain name. What I learned is to be able to see the URL in the Monitor tab, you need to enable URL filtering on the security policy that matches up with some decryption.
At any rate, we have been using a lot of * asterisks. For example: example.com/noaccess/*
Have you tried that?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!