PAN only takes the first category of an URL from Brightcloud

Showing results for 
Show  only  | Search instead for 
Did you mean: 

PAN only takes the first category of an URL from Brightcloud

Not applicable

Here is an example: is rated on the website of Brightcloud as "Business and Economy" and "Health and Medicine".

"test url" results in a  "Business and Economy", which could cause some legal issues when traffic to "Health and Medicine" should not be performed due to privacy reasons.

Are there any plans to change that in the near future?




L4 Transporter

Hi Michael,

this has been discussed before

What is your suggestion ? How would you like to see this implemented ?

rgds Roland

L6 Presenter

Isnt this just a cli bug (which of course should be taken care of but still)?

I mean what happens if you setup a rule that block access to "Health and Medicine", are you still able to access ?

I have reviewed other discussions as well after I have written the posting. I haven't tested the proposal with creating custom categories so far.

The more I think about it, the less I have a solution for it:

What should be done for a URL like that: ""? It is fist categorized as "travel", then as "nudity" and lastly as "porn".

A company which want to prevent its emploees from porn etc. would have to make custom categories for every questionable website? That can't be the solution.

Maybe all categories should be taken into account?


PAN usually pulls out single category from Brightcloud server, if you feel like any website is marked under wrong category please open a case with support so that a request can be filed. The category will be verified and will be fixed in the next URL db release.

Between, you can check the URL category from the following command on CLI:

PAN> test url <website>



Can this be fixed or is this a hardware limit or such in PAN?

Because I find it too a bit odd that only a single category would match.

The is a great example. If this url would be categoriesed as both "nudity" and "traveling" and I setup a security rule to block access to travelsites I expect this rule to get a hit for "" without me having to manually create my own url-category database (because thats the whole point of buying an url-category db license to not having to maintain your own url-db except for a few "false positives" or "unknown" sites). The same if I setup a security rule to block "nudity", I expect that the same url would get a match here too.


   I must first state I am new to the PAN's and setting up URL filtering to replace our existing proxy based web filtering solution.

   I would/did expect that a site categorized as Nudity and Travel would be blocked if I have a block rule to block nudity.  ie I hope that the PAN evaluates for multiple categories and that Blocks win out.over allows - and then I would build my rules accordingly.



Not applicable

Has Palo Alto followed up on this?  The last discussion was 8 months ago. Hard to believe that other url filtering companies can do this for years now.



Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!