Newly Registered Domains configuration

[timohill]

Is there any way to configure the length of time that a domain is considered "newly registered"? 32 days is excessive for my purposes, I'd like to set this to e.g. 14 days.

[Adrian_Jensen · Accepted solution]

@timohill Unfortunately, there is no way to change the default time. The URL categorization comes from a near-realtime database provided by PaloAlto and the newly-registered category is based on their published parameters. You can create a custom URL categorization and put any newly registered domains you want in there to override the PaloAlto-provided categorization if you want.

Example:

Create a new company allow category -

Objects -> Custom Objects -> URL Category -> Add

Name: ACME-Allow

Description: Domains to always be allowed

Type: URL List

Sites: mynewdomain.com/, *.mynewdomain.com/  (1)

Update your URL Filtering Policy to allow the new category -

Objects -> Security Profiles -> URL Filtering -> default  (2)

ACME-Allow - Site Access: allow, User Credential: allow

(1) - Be sure to understand URL regex options as used in lists and terminate FQDNs with a slash, see:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oM79CAE

https://docs.paloaltonetworks.com/advanced-url-filtering/administration/configuring-url-filtering/ur...

(2) - Or whatever your name is used for your URL Filtering profile applied to Security Rules

[timohill]

Got it, thanks for confirming. If anyone from Palo Alto is listening and could add this as a requested feature that would be excellent, but in the meantime we can continue to whitelist URLs as needed.