how to block randomly generated urls

[Greg_Majersky]

We are seeing alot of urls with randomly generated urls getting past our existing guards.  Is there a rule, plug-in or ?? that could deny urls that don't match known word patterns?

Thank you

Panorama

NGFW 

AIOps for NGFW 

[PavelK]

Hello @Greg_Majersky

thank you for the post!

If you mean newly registered domains (NRD) / DGA, then PAN-DB has a URL filtering category called: "newly-registered-domain". You can set the action to block to block these URLs.

If you have DNS Security subscription, then you can block these domains as well: https://live.paloaltonetworks.com/t5/blogs/new-strategically-aged-domain-detection-for-dns-security/...

If you are referring to different URL categories or different case, could you please share more details about issue you are facing? Ideally, if you can share a few samples of these URLs.

Kind Regards

Pavel