- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
11-18-2021 04:32 PM
Is there a way, within the URL Categories, to override wildcarded domain blocks in one category with more specific allows in another category? E.g. we have created custom URL categories for company allowed and blocked domains. I have a wildcarded domain that was put in a custom block category do to Infosec policies. Now I need to add that specific URL path to the allowed list, while continuing to block the rest of the domain.
Custom Objects->URL Categories->
URL-Allow:
server3.example.com/
URL-Block:
*.example.com/
example.com/
Security Profiles->URL Filtering
Category:
abortion - block block
abused-drugs - block block
adult - block block
...
URL-Allow - allow allow
URL-Block - block block
When going to https://server3.example.com/video the connection gets blocked by the URL-Block list, even though the more specific URL match exists in the URL-Allow list. Other than putting the URL in the URL Filtering->Overrides, is there a way to order precedence of URL Categories to match more specifics?
11-18-2021 10:00 PM - edited 11-18-2021 10:01 PM
Hi @Adrian_Jensen ,
This is how the Palo Alto URL filtering order works by design. The one that has more severe action will be chosen first. For more details, you can refer this KB Article.
Block- Most Severe
Allow-Least Severe
Hope it helps!
11-18-2021 10:00 PM - edited 11-18-2021 10:01 PM
Hi @Adrian_Jensen ,
This is how the Palo Alto URL filtering order works by design. The one that has more severe action will be chosen first. For more details, you can refer this KB Article.
Block- Most Severe
Allow-Least Severe
Hope it helps!
11-19-2021 07:45 AM
Ah, OK, thanks. That is what I suspected, but searching I couldn't find that KB when looking for URL Category order of operation. I think the most important part of that is the end of the KB that defines category priority in filtering.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!