It appears as a blocked URL, but you can still access the page without decrypt

[Alpalo]

I want to block the page XDRAY.COM.

In this case it is about XDRAY.COM https://ydray.com/

I have created a URL filtering profile and I have it applied in the security rule where it works ok, however, although in the url filtering monitor I see this session as block-url, the user can open this url

Any idea why it may be failing?

Attached are screenshots

[kiwi · Accepted solution]

hi @Alpalo ,

Any chance to show us how you set up the URL filtering profile ? Did you configure a custom URL category ?

If so, did you add both XDRAY.COM and *.XDRAY.COM ?

Cheers,

-Kiwi.

[Alpalo]

When I configured both URLs problem has been fixed.

Thanks so much