URL Filter Continue mode requires constant refresh

[joshsmtech]

I am testing a URL filter that when a user tries to go to facebook, they are presented with the PAN URL "Continue" page (see attached). They are allowed to go to the page if they click on Continue to acknowledge they will be tracked. This works fine initially, but it seems as though there is some sort of timeout. If the page sits idle for about 5 mins and the user goes back to it, the page does not load unless they re-type www.facebook.com into their browser, hit the "Continue" warning page again and click continue again to get to facebook.

Is this the way this feature is intended to work? It seems like there is a cookie or something missing that isn't caching when the user clicks accept on the continue page. Or is there a setting somewhere in the PA firewall to set a timeout for this somehow?

[kalavi · Accepted solution]

Hi,

It’s per category, and there is a timeout value that can be set.

First get into the CLI and go to configure mode by typing "configure".

Then do the following from the # prompt:

# set deviceconfig setting ctd url-admin-timeout set url admin continue timeout(minutes)

# set deviceconfig setting ctd url-coach-timeout set url coach continue timeout(minutes)

# set deviceconfig setting ctd url-lockout-timeout set url admin override lockouttimeout(minutes)

- Khubaib

[joshsmtech]

Thanks for the tip. How can I see what the settings are currently?

[kalavi]

Hi,

configure

# show deviceconfig setting ctd

-Khubaib

[mrajdev]

You can also use the command "show system setting ctd url-block-cache" from the operational mode.