URL Identification

[hbshin]

Hi

i have a question about URL Identification.

i use url object in security policy and no use ssl decryption

if no SNI is present and there is no CN enrty,

how can identify URL?

thanks.

[kiwi]

Hi @hbshin ,

The categorization is done either by IP address or via the Common Name from the SSL certificate or Server Name Indication (SNI). 

URL Categorization of SSL Websites

Cheers !

-Kiwi

[hbshin]

Hi @kiwi 

Thank you for your reply.

i understood SNI and CN Name

Could you explain more about The categorization by IP Address ?

How are URLs categorized by IP address?

Thanks.

[kiwi]

Hi @hbshin ,

How PAN-DB works

The PAN-DB Core, located in the Palo Alto Networks threat intelligence cloud, has a full URL and IP database to cover web security needs.

Millions of URLs and IPs are classified in a variety of ways. In addition to the “Multi-language classification engine” and the “URL change request from users,” PAN-DB receives malicious URL and IP information from WildFire.

Cheers !

-Kiwi.