This morning I noticed some hosts on our network were blocked from visiting ublockorigin.pages.dev and malware-filter.pages.dev because the URL filter categorized those pages as phishing. These URLs appear to be associated with the uBlock Origin adblocker extension. Does anyone know why these pages are categorized as phishing now by Palo Alto?
Check your inline ML engine as this could be because of it : https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/url-filtering/configure-url-filtering-inl...
To check the cloud URL database go to https://urlfiltering.paloaltonetworks.com/ and if needed "Request a Change" if you think it is a false positive.
Also look at this link to get the idea about ML-inline:
I forgot to add that you can also create a custom category for the URL that will overide the default one:
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!