URL Category priority

[User_333]

Hi

I am wondering what will happen if one URL is in two different categories. Especially if one is configured to block, the other to pass the request.

I don't know if this can happen within predefined categories (from BrightCloud), but as i am able to define new ones, its possible to add a already categorized URL in my own category.

Our goal is, to have a global deny and allow category for all of our user groups. Defining the URL's in each of the URL Profile isn't a option, because its easy to get a inconsistency. So i would like to create two new Categories (globalAllow, globalBlock) and add (or remove) my URL's just to this category. To do this, I have to know the behaviour if a URL is in two categories.

[dyang · Accepted solution]

Hello,

The order in which the device checks for URL categories is as follows:

1.  Block list

2.  Allow list

3.  Custom categories

4.  Device cache

5.  BrightCloud downloaded database

6.  Cloud lookup (if enabled)

That means that if you've included a specific URL in a block list, it will always be blocked, regardless of how it is categorized by BrightCloud.

Hope this helps,

Doris

[User_333]

Hello

Thanks for your answer.

To sum up: Sites in my own category will always overwrite the BrightCloud (downloaded db and cloud lookup) definition.

Btw: What do you mean with "Device cache"? Cached BrightCloud cloud lookups?

[dyang]

Hello,

You are correct - The device cache stores the latest BrightCloud cloud lookups.  If you designate an action or category for a URL (either through an allow/block list or custom category), those will always override the BrightCloud category when used in policy. 

Hope this helps,

Doris