URL list allowed on firewall

[shirishkulkarni]

Hi Team,

I need a list of URLs that are allowed through the Palo Alto firewall.

Is there any way to get the URL's name through cli or gui that is allowed through our firewall?

Only allowed url names are require

[reaper]

You can view all the urls being allowed via the URL filtering log

You can also collect the url cache for the most active url's being accessed via your firewall right now:

> show running url-cache all

Output into file: dp_url_DB.log

> less mp-log dp_url_DB.log

If you want to know which categories are currently being allowed, you'll need to check your url filtering profile that's associated with your outbound web browsing rule (if you don't know which one that is, this is probably a good time to create one 🙂 )

[shirishkulkarni]

The url filtering log shows the current url used.

I need a list of URLs that we allowed in our firewall, as we need to add them to our DNS server.

Can we get those URL names that were allowed in the firewall by us?

[reaper]

you can see which URLs are being access by users from the URL log

you can't collect a list of all the URLs you theoretically allow as these are not publicly available (there are many url filtering categories and listing all URLs for each category is nigh impossible)