- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
08-08-2011 12:54 AM
Hi all,
Are there anyone found URL Filtering log like below:
*.dropbox.com/
*.settrade.com/
*.facebook.com/
What does " * " means?
08-08-2011 04:19 PM
Hello, Are you seeing this in URL filtering log???? thats not known behaviour.
You would generally put *.facebook.com under object -> security profile- > URL filtering -> block/allow
* means all the subdomains - e.g. chat.facebook.com.
Hope this helps.
Thanks
Unnati
08-10-2011 04:37 AM
Hi ukhapre,
I have one more question.
I set URL Filtering to allow only Facebook in allow list, and block category Social Network.
PAN should block all of Social Network, and allow only Facebook in the same time right?
But it still block Facebook.
Please advise.
08-10-2011 04:52 AM
Facebook uses several domains, like fbcdn.com or fbcdn.net
08-10-2011 04:55 AM
about your first question for names like *.facebook.com, it appears when a website is using SSL. Because of encryption, PaloAlto cannot see the real URL that is asked by the client. So it will log certificate name instead.
If you want to see URLs inside a SSL encrypted session, you must configure PA SSL Decryption.
08-10-2011 08:14 PM
Did you add both sites below?
*.facebook.com
facebook.com
It should work unless its trying to reach sites other than above.
08-10-2011 08:22 PM
Hi ukhapre,
I tried on both, and it is not working. But after restart device, it is work.
This is all i tried with regular expression,
*.facebook.com
www.facebook.com
www.facebook.*
*.facebook.*
08-11-2011 11:05 AM
This is what works for us
*.facebook.com
facebook.com/
Hope this helps
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!