06-20-2023 01:00 PM
What are the known bad url categories that palo checks is blocked? We currently block all the categories in this document but AI-Ops still flags it. Is there a way to see specifically what its failing?
Malicious URL Categories (paloaltonetworks.com)
06-20-2023 02:29 PM
Hello,
If you correlate the traffic in the Unified logs, it should tell you why the traffic was blocked etc.
Regards,
06-21-2023 05:07 AM
Im more wondering why AI-Ops doesnt think we're blocking known bad url categories. Not necessarily anything in the firewall logs or why something is getting blocked or allowed.
06-21-2023 06:07 AM
The AIOps dashboard is ... less than intuitive. If you go into the 'Alerts' section on the dashboard and click on the hyperlink of the alert it'll bring you into the actual alert details. This will list out the 'Evidence' at the bottom that will have the actual URL Filtering profile name and list the categories that the profile doesn't have set to block.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
