URL filtering

Reply
Highlighted
L5 Sessionator

URL filtering

hi all,

I am trying to configure Palo alto's URL filtering for allowing user to access web site like mappy. Problem is mappy make request to other web site for displaying photos and others ....

Do you know if it's possible to create a rule using a criteriun like "referrer" in URL filtering ??

eg: allow mappy and mappy referrer

thanks in advance for all you answers.

V.

Tags (2)
Highlighted
L6 Presenter

This is not possible in PANOS 3.1.X software.

If you wish to see this feature implemented in a future release you should talk to your Palo Alto Sales team.

-Benjamin

Highlighted
L5 Sessionator

Thanks for your answer.

Then how can you implement URL filtering without "referrer" feature ???

Have you to know all allowed web site dependencies ?

Not really usable

V.

Highlighted
L4 Transporter

If you have a very restrictive URL filtering policy, then you will run into these types of issues and you will have to manually create exceptions or be less restrictive.

The URL Filtering feature simply uses the URI information to block or allow based on how you set your policy.  You might be able to accomplish your goal using a custom App-ID with an HTTP decoder.  This unlocks all of the HTTP headers and contexts so you can create a more granular signature.  This would not take URL category information to account, so you will need to weigh the pros and cons of each method.

Cheers,

Kelly

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!