URL Category priority

Reply
Highlighted
L2 Linker

URL Category priority

Hi

I am wondering what will happen if one URL is in two different categories. Especially if one is configured to block, the other to pass the request.


I don't know if this can happen within predefined categories (from BrightCloud), but as i am able to define new ones, its possible to add a already categorized URL in my own category.

Our goal is, to have a global deny and allow category for all of our user groups. Defining the URL's in each of the URL Profile isn't a option, because its easy to get a inconsistency. So i would like to create two new Categories (globalAllow, globalBlock) and add (or remove) my URL's just to this category. To do this, I have to know the behaviour if a URL is in two categories.

Tags (2)

Accepted Solutions
Highlighted
L5 Sessionator

Re: URL Category priority

Hello,

The order in which the device checks for URL categories is as follows:

1.  Block list

2.  Allow list

3.  Custom categories

4.  Device cache

5.  BrightCloud downloaded database

6.  Cloud lookup (if enabled)

That means that if you've included a specific URL in a block list, it will always be blocked, regardless of how it is categorized by BrightCloud.

Hope this helps,

Doris

View solution in original post


All Replies
Highlighted
L5 Sessionator

Re: URL Category priority

Hello,

The order in which the device checks for URL categories is as follows:

1.  Block list

2.  Allow list

3.  Custom categories

4.  Device cache

5.  BrightCloud downloaded database

6.  Cloud lookup (if enabled)

That means that if you've included a specific URL in a block list, it will always be blocked, regardless of how it is categorized by BrightCloud.

Hope this helps,

Doris

View solution in original post

Highlighted
L2 Linker

Re: URL Category priority

Hello

Thanks for your answer.

To sum up: Sites in my own category will always overwrite the BrightCloud (downloaded db and cloud lookup) definition.

Btw: What do you mean with "Device cache"? Cached BrightCloud cloud lookups?

Highlighted
L5 Sessionator

Re: URL Category priority

Hello,

You are correct - The device cache stores the latest BrightCloud cloud lookups.  If you designate an action or category for a URL (either through an allow/block list or custom category), those will always override the BrightCloud category when used in policy. 

Hope this helps,

Doris

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!