URL filtering

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

URL filtering

L5 Sessionator

hi all,

I am trying to configure Palo alto's URL filtering for allowing user to access web site like mappy. Problem is mappy make request to other web site for displaying photos and others ....

Do you know if it's possible to create a rule using a criteriun like "referrer" in URL filtering ??

eg: allow mappy and mappy referrer

thanks in advance for all you answers.

V.

3 REPLIES 3

L6 Presenter

This is not possible in PANOS 3.1.X software.

If you wish to see this feature implemented in a future release you should talk to your Palo Alto Sales team.

-Benjamin

Thanks for your answer.

Then how can you implement URL filtering without "referrer" feature ???

Have you to know all allowed web site dependencies ?

Not really usable

V.

If you have a very restrictive URL filtering policy, then you will run into these types of issues and you will have to manually create exceptions or be less restrictive.

The URL Filtering feature simply uses the URI information to block or allow based on how you set your policy.  You might be able to accomplish your goal using a custom App-ID with an HTTP decoder.  This unlocks all of the HTTP headers and contexts so you can create a more granular signature.  This would not take URL category information to account, so you will need to weigh the pros and cons of each method.

Cheers,

Kelly

  • 3857 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!