URL Filter Question

[VSU_ITSEC]

Does PA not do DNS lookups on URL filtering?

We have an FQDN being blocked as malware, but the site can be accessed if the IP address is used.

thx

//moe

[pulukas]

URL filtering is strictly based on the url content.  So you would also need to add the ip address as a url.

For ip based black lists we usually maintain a security rule at the top of the rulebase to stop the current bad ip list and country blocks as more efficient for this than the url filter.