Custom URL filtering policy

[a_Islam]

we created two custom policies where some listed URLs or domains will allow on specific workstations and others will be denied. After implementing these policies we found that listed allow list URLs or websites can be accessible but end users only can see the website content without Images. We had a support call with PA team but didn't resolve this issue.

Anyone does have this same issue and if anyone has any solution please share.

Thanks

[PavelK]

Hello @a_Islam

the likely root cause is your custom policy is allowing URL of the site while blocking CDN where images are located. You will have to figure out from what sites are images being fetch from and add them to the policy.

Kind Regards

Pavel

[BPry]

@a_Islam,

To expand on what @PavelK mentioned, the easiest way to identify these is to create an "alert-all" URL profile and apply it to a test client. You'll have to temporarily create an allow entry for the test client associated with the "alert-all" profile and then can analyze the URL logs to identify any resources the test client is loading that you aren't allowing. 

[a_Islam]

Thanks, @PavelK and @BPry for your nice feedback. These websites were online news portals and financial markets. I'll apply these things but I think this is the minimal requirement for any customer and it is supposed to work smoothly I don't know why the PA support team mentioned it's not possible to fulfill this requirement.