Best Practice "Allow New Apps" rule is blocking an URL

[Ariq_Aziz]

Hi Experts

one of our devOps guy use "Postman" and getting connection reset while using the URL" xxx.yy.api.zzzz.io/" (TCP 443)

Log shows Traffic is allowed but URL is getting blocked by the Same RULE called "Allow New App" its a default best practice rule and doesnt allow me to change the URL or add a bypass. What is the best way to overcome this ? I really dont want to add a new rule above this Best practice rule. 

Thanks

ARIQ

[Sai_Periketi_SMC]

Any workaround for this?

[Raido_Rattameister]

Are you blocking any of the categories listed under "URL Category List" on your first screenshot?

[cruhrup]

Hi @Ariq_Aziz,

The URL Category "insufficient-content" is blocked by default for best practices. I've hit this same issue in my home lab (PA-440) with various other API traffic as well as services utilizing CDNs (such as Netflix content). My suggestion would be to create a custom URL category to allow specific traffic through, so the default URL category "insufficient-content" can still block other traffic.

Create a Custom URL Category:
https://docs.paloaltonetworks.com/advanced-url-filtering/administration/configuring-url-filtering/ur...