URL Profile Known Bad Categories

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

URL Profile Known Bad Categories

L5 Sessionator

What are the known bad url categories that palo checks is blocked? We currently block all the categories in this document but AI-Ops still flags it. Is there a way to see specifically what its failing? 

 

Malicious URL Categories (paloaltonetworks.com)

 

Claw4609_0-1687291149037.png

 

3 REPLIES 3

Cyber Elite
Cyber Elite

Hello,

If you correlate the traffic in the Unified logs, it should tell you why the traffic was blocked etc.

 

Regards,

Im more wondering why AI-Ops doesnt think we're blocking known bad url categories. Not necessarily anything in the firewall logs or why something is getting blocked or allowed.

Cyber Elite
Cyber Elite

@Claw4609,

The AIOps dashboard is ... less than intuitive. If you go into the 'Alerts' section on the dashboard and click on the hyperlink of the alert it'll bring you into the actual alert details. This will list out the 'Evidence' at the bottom that will have the actual URL Filtering profile name and list the categories that the profile doesn't have set to block. 

  • 1124 Views
  • 3 replies
  • 0 Likes
  • 101 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!