URL block message

[raji_toor]

We are getting this message, when opening websites sometimes. My suspect is the unknown category which was set to be blocked recently. But i don't know what is the source page of this message and it is the same message everytime, with business name on top of it. Although it has nohing to do with streaming.

I have seen this message before too but it was not that frequent untill we blocked unkown cateory.

[BPry · Accepted solution]

It looks like some admin at one point in time customized the response page. I suspect that this is likley caused by the response page 'URL Filtering and Category Match Block Page' that can be found under the 'Device' tab by looking at the 'Reponse Pages' tab. 

You'll simply need to modify this page so to a more generic block message; or you can utilize some fancy Javascript so that each category actually gives a unique block page, but most would simply apply a more generic message. 

[Raido_Rattameister · Accepted solution]

You can find Response Pages here:

Device > Response Pages

Download URL Filtering and Category Match Block Page, edit in Notepad and upload back.

This helps you to identify what URL initiates block page.

https://live.paloaltonetworks.com/t5/Tech-Note-Articles/Customizing-Response-Pages/ta-p/57809

Or go to Monitor > URL Filtering and apply filter:

(action eq block-url) and (category eq unknown)

[raji_toor]

Thanks @BPry and @Raido_Rattameister, it apperanetly was an old carried over configuration.

Do you know how much time paloalto takes to move a domain from unkown to specific categories.

[BPry]

@raji_toor

If you submit it for a URL Category change it usually takes a few hours or less. Otherwise it'll happen whenever Palo Alto actually gets around to categorizing it. 

If you wish to submit a URL Category change you can do so from THIS Palo Alto website.