URL filtering

[VinceM]

hi all,

I am trying to configure Palo alto's URL filtering for allowing user to access web site like mappy. Problem is mappy make request to other web site for displaying photos and others ....

Do you know if it's possible to create a rule using a criteriun like "referrer" in URL filtering ??

eg: allow mappy and mappy referrer

thanks in advance for all you answers.

V.

[bpappas]

This is not possible in PANOS 3.1.X software.

If you wish to see this feature implemented in a future release you should talk to your Palo Alto Sales team.

-Benjamin

[VinceM]

Thanks for your answer.

Then how can you implement URL filtering without "referrer" feature ???

Have you to know all allowed web site dependencies ?

Not really usable

V.

[kbrazil]

If you have a very restrictive URL filtering policy, then you will run into these types of issues and you will have to manually create exceptions or be less restrictive.

The URL Filtering feature simply uses the URI information to block or allow based on how you set your policy.  You might be able to accomplish your goal using a custom App-ID with an HTTP decoder.  This unlocks all of the HTTP headers and contexts so you can create a more granular signature.  This would not take URL category information to account, so you will need to weigh the pros and cons of each method.

Cheers,

Kelly