URL filtering Profile - URL in allow list does not work.

[SOC_CSG]

Hello,

PAN-OS 5.08

I have a security police to which applied a URL filtering Profile.

I have blocked the category "social-networking" and I need to allow "twitter.com"

I tried putting the URL in allow List:

*.twitter.com

*.twitter.com/*

www.twitter.com

But it does not work.

I have also tried creating a Custom URL Category but neither works.

How can I do this ?

Diego C

[panos]

could you pleaase add also "twitter.com"

[ssharma]

Hi Diego,

Change the custom category to following format :

twitter.com

*.twitter.com

Remove other urls for twitter, commit the changes and see if that works. Hope this helps. Thank you.

[hyadavalli]

Hello Diego,

If you are not implementing ssl-decryption and want to do custom url-filtering for encrypted sites please take a look at the certificate of the sites and use the "CN-name" or "Issued-to" in Custom URL category to block or allow those URLs.

Hope this helps.

Regards,

Hari Yadavalli