URL Filtering Order of Operations

[dan731028]

Could someone tell me the order of operations the firewall uses when evaluating a site for URL Filtering (using PAN-DB if that makes a difference) in terms of how the firewall examines a URL and when it makes a match based on custom url categories, default categories, url filtering block list, and url filtering allow list.  I'm wanting to get a better understanding how the firewall does this.  I have a scenario where I added *.info to a custom URL category to block this for everyone in my environment.  I added a specific url www.mysite.info (for example only.  Not real URL) to a custom URL category that I want to allow for everyone in my environment.  Even though I did this, the site was still blocked.  I added www.mysite.info to to the URL filtering profile allow list and I could then get to www.mysite.info while other .info sites were blocke

What I'm really wanting to know is if the configuration described above is correct, or if there would be a better way to pull off what I am trying to do.  I wanted to be able to edit one or two custom URL custom categories instead of touching all of URL profiles.

Thanks!
-D

[hshah · Accepted solution]

Hello Dan,

Please find bellow document for order.

What order does the PAN use to check for URL categories?

Add following tow in allow list, it will work.

*.mysite.info/

mysite.info/

Regards,

Hardik Shah

[hvcomputech]

Remember that if you put it on the allow list, it will be allowed but it won't be logged.

[dan731028]

Thanks,
I knew this info was out there somewhere.