URL Filtering - Counter Termism Internet Referral Unit (CTIRU)

[EllistonEnsor]

Hi All.

First post so hopefully in the right place.

We are using our 3220s for url filtering in our school.  I have been asked to check if our filtering is including content from the UK CTIRU database.  We make use of the Extremism category as part of our filtering, however I cannot find any information to say one way or the other if the content from the CTIRU database is included.  Our support partner was not able to confirm.  Does anyone have any experience with this?  Many thanks.

[JayGolf]

Hi @EllistonEnsor ,

PAN-DB uses URL information from Unit 42, WildFire, passive DNS, Palo Alto Networks telemetry data, and data from the Cyber Threat Alliance. 

[BPry]

@EllistonEnsor,

If this is for any sort of compliance aspect I'd recommend setting up a URL EDL and just polling the CTIRU for URLs assuming that it's actually available in a programmatic format somewhere. Just doing a brief Google search and I'm not seeing an actual published database. 

[EllistonEnsor]

Thanks for the reply and suggestion BPry.  That was our support partners suggestion, however I couldn't find any info on the database either.  Thanks for your time looking.

[EllistonEnsor]

Thanks JayGolf for your input.  The only info I can see directly from Palo is :

extremism—Websites promoting terrorism, racism, fascism, or other extremist views discriminating against people or groups of different ethnic backgrounds, religions or other beliefs. This category was introduced to enable adherence to child protection laws required in the education industry. In some regions, laws and regulations may prohibit allowing access to extremist sites, and allowing access may pose a liability risk.

I will keep digging! Thanks for your time looking.